| |||||||||||||
Firefox locks down the components directoryFirefox locks down the components directoryPosted Nov 27, 2009 11:33 UTC (Fri) by bangert (subscriber, #28342)In reply to: Firefox locks down the components directory by nix Parent article: Firefox locks down the components directory
except that, in the past a number of privilege escalation bugs, elevating
code to chrome:/ level, have been present in FF?
(Log in to post comments)
Firefox locks down the components directory Posted Nov 28, 2009 6:53 UTC (Sat) by njs (guest, #40338) [Link]
Sure, but IIUC chrome privileges *mean* you can do anything firefox can do, e.g. write to arbitrary files; turning this into a full-blown binary code injection is easy. JSCtypes doesn't sound like it lets you do anything you couldn't do before if you really wanted to and didn't care how much wreckage you left in your wake; it just makes it easier and supported.
|
|||||||||||||