------------------------------------- exploit.htm ------------------------------------- // FrSIRT Comment - This is a 0day exploit/vulnerability (unpatched) // If a user clicks anywhere on a specially crafted page, this code will // automatically create and execute a malicious batch/exe file. // // Update (08.05.2005) - The Mozilla Foundation patched (partially) this // issue on the server side by adding random letters and numbers to the // install function, which will prevent this exploit from working. Click anywhere inside this page

Advisory - http://www.frsirt.com/english/advisories/2005/0493