Closed Bug 190171 Opened 22 years ago Closed 22 years ago

img src attacks

Categories

(Core :: Layout: Images, Video, and HTML Frames, defect)

Product:
Core
Component:
Layout: Images, Video, and HTML Frames
Platform:
x86
Windows 2000
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
RESOLVED DUPLICATE of bug 181860

People

(Reporter: hjtoi-bugzilla, Assigned: jdunn)

Details

This was mailed to security@mozilla.org, but this is also public on MozillaZine:
http://www.mozillazine.org/forums/viewtopic.php?p=32510

"Sometimes I come across those pages with malicious
img tags on them to crash a browser, for example
<img src=mailto:111111> opens up thousands of mailer windows and
<img src=telnet://...
<img src=pnm://...
<img src=news://...
<img src=file://...
are annoying too"

I tested that the telnet URL at least launched command line telnet application
on my Win2k box.
Flags: blocking1.3b?

*** This bug has been marked as a duplicate of 181860 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
Flags: blocking1.3b?
Product: Core → Core Graveyard
Product: Core Graveyard → Core
You need to log in before you can comment on or make changes to this bug.