Comments on: Remote Command Execution in FireFox et al

By: JusyUnons

JusyUnons — Fri, 30 Jan 2009 10:26:42 +0000

xs-sniper.com – now in my rss reader)))

By: Zero Day mobile edition

Zero Day mobile edition — Thu, 03 Jul 2008 18:11:24 +0000

[...] site. Rios and my blogging collegue Nate McFeters have spent the better part of the last year warning about serious URI-handler security [...]

By: Technology latest news » Blog Archive » Mozilla flaw attack code published (InfoWorld)

Fri, 29 Feb 2008 03:18:14 +0000

[...] second flaw was disclosed Tuesday by Billy Rios and Nathan McFeters, security consultants with Verisign and Ernst & Young [...]

By: Technology latest news » Blog Archive » Researcher Publishes Attack Code for Mozilla Flaw (PC World)

Fri, 29 Feb 2008 03:17:46 +0000

[...] which was the source of another bug, disclosed Tuesday by Mozilla. This second flaw was disclosed Tuesday by Billy Rios and Nathan McFeters, security consultants with Verisign Inc. and Ernst & [...]

By: Kapila Rattan

Kapila Rattan — Fri, 12 Oct 2007 11:07:02 +0000

Hi,
I was going through your blog regarding the vulnerability. It would be a great help if u could tell me what registry settings need to be done for the exploit running.

By: IE bug

IE bug — Fri, 12 Oct 2007 08:34:04 +0000

nice bug.
http:%00../../../../windows/system32/calc.exe”cmd

By: hackademix.net » IE's "Non-Bug" Can Cost Your (Second)Life

hackademix.net » IE's "Non-Bug" Can Cost Your (Second)Life — Sun, 16 Sep 2007 16:26:26 +0000

[...] Firefox pwns… all the world and Mozilla recognizes the same bug that had been blamed on IE affects Firefox itself. [...]

By: VulnAware.com » VU#783400:Mozilla Firefox URI filtering vulnerability

VulnAware.com » VU#783400:Mozilla Firefox URI filtering vulnerability — Wed, 08 Aug 2007 23:23:04 +0000

[...] using an application layer firewall or IPS may mitigate this vulnerability. See the xs-sniper blog for more information about known vulnerable URIs. Please note that these filters may only work for [...]

By: The Protocol Handler Saga Continues: Say What Secunia? - Jesper's Blog

The Protocol Handler Saga Continues: Say What Secunia? - Jesper's Blog — Wed, 08 Aug 2007 03:41:12 +0000

[...] Protocol Handler Saga is rapidly becoming a religious war. The latest entry is related to a very cool exploit that Billy Rios and Nate McFeters published on Tuesday. Unfortunately, he failed to give Mozilla a chance to fix the problem before [...]

By: Blog do Márcio d’Ávila » Firefox 2.0.0.6 bloqueia falha em Windows XP/2003

Thu, 02 Aug 2007 04:28:36 +0000

[...] Remote Command Execution in FireFox et al, por Billy (BK) Rios, 24 julho 2007. [...]