267570 - network.protocol-handler.external.shell vulnerability still in Firefox 1.01PR

Status: RESOLVED INVALID

(Firefox Build System :: General, defect)

Description

[zero_one010101]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; rv:1.7.3) Gecko/20041001 Firefox/0.10.1

bcheck.scanit.be/bcheck/ performs a test in your broswer for vulnerabilities.
The site performs 7 different tests on Mozilla browsers.
I have the lastest version of Mozilla Firefox (1.10.1) and the test results
still detect the vulnerbility of the Mozilla windows shell: external protocol
handler.
That bug suposed to be fixed in Mozilla Firefox 9.2.
However my browser seems to  still being vulnerable.

Reproducible: Always
Steps to Reproduce:
1.Enter the site http://bcheck.scanit.be/bcheck/
2.
3.

Actual Results:  
The test results finds a medium risk vulnerability (moz250180).

Expected Results:  
As I have the lastest version of Firefox, that vulnerabuilty should be already
fixed.

Im using 'Qute 2.1.3' theme.
I have the following extensions installed:
DOM Inspector 1.0
mozImage 0.10.0
Bandwidth Tester 0.4
Compact Menu 1.7.1.1
BugMeNot 0.6
Download Manager Tweak 0.6.2
ieview 0.84

Comment 1

[Phil Ringnalda (:philor)]

*** Bug 267568 has been marked as a duplicate of this bug. ***

Comment 2

[OstGote!]

WFM with FF 1.0RC2/0.12. Not with Moz 1.8a5 but only because the test is not ok,
I guess it tests only if I can open a window with shell. Mozilla does open a
window and displays an error (unknown protocol). So the tests display failed
although Moz is no vulnerable. FF does not open any extra window.

Comment 3

[Jesse Ruderman]

WFM Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20041030
Firefox/1.0RC2.  I used http://bcheck.scanit.be/bcheck/choosetests.php and only
checked "moz250180".

Does upgrading to RC2 help?  When the site says "test failed", what else happens
(error messages, Media player window appearing, etc)?

Comment 4

[zero_one010101]

Well, even after the big release of Firefox 1.0, my browser is still vulnerable.
I performed the test again.
Answering the Jesse Ruderman's question, nothing happens, no new windows or open
programs, but my broser fails the test.
When iI uninstalled Firefox 1.01.1 PR, I also deleted the entire folder, but
when i Installed Firefox 1.0, the program reminded the my custom preferences and
extensions. Where can I delete that, maybe the problem is there.

Comment 5

[Jesse Ruderman]

The test on the site could be incorrect.  Can you make a minimal testcase and
attach it here?

Comment 6

[zero_one010101]

I'm very sorry, I don't know what you mean with "minimal testcase". Can you
explain it to me?

Comment 7

[Jesse Ruderman]

A very small page that demonstrates the problem, probably based on the page you
linked to.  http://www.mozilla.org/newlayout/bugathon.html

Comment 8

[zero_one010101]

You know, for some reason, the site never detects if i have javascript enabled,
but it performs the scan anyway.
I think it must be, as you say "Evangelised"!
But I dont mind.
I guess that's all. Thanks everyone for your support.