TUCoPS :: Browsers :: tb12491.htm

0DAY: QuickTime pwns Firefox
0DAY: QuickTime pwns Firefox
0DAY: QuickTime pwns Firefox


It seams that QuickTime media formats can hack into Firefox. The
result of this vulnerability can lead to full compromise of the
browser and maybe even the underlaying operating system. Don't try
this at home.

In practice I can do anything with the browser, like installing
browser backdoors, and the operating system if the victim is running
with administrative privileges. However, just for the sake of this
demonstration, I simply open calc.exe. Keep in mind that the exploit
is cross-platformed.

Check the link above for demonstration and more information how the
exploit works.

pdp (architect) | petko d. petkov

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH