OpenText FirstClass 8.0 Client Arbitrary File Execution
From: dila (dilabox_at_gmail.com)
Date: Fri, 8 Apr 2005 01:41:28 +0100 To: "[L] bugtraq" <firstname.lastname@example.org>
Product: OpenText FirstClass 8.0 Client
Platform: Microsoft Windows
Description: Insufficient validation of user input allows arbitrary
FirstClass bookmark files allow the user to organise their web
address's using the familiar FirstClass desktop environment. The
vulnerable field has been highlighted in the attached screen dump. The
URL text string is passed directly to the Windows ShellExecute API,
which allows any local/network file to be executed when the bookmark
A similar issue affecting URL's in FirstClass RTF documents was
apparently reported last year, but remains unpatched.
Simply comparing the first seven characters of the input string to
"http://" should be sufficient protection.
- image/png attachment: screen.png