Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox图形预加载绕过内容策略检查漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox在试图预加载图形时nsDocument::MaybePreLoadImage没有正确地调用nsIContentPolicy安全检查。尽管网页中无法使用图形内容，用户仍可以指定正常情况下网页中不允许的协议，如 "file:" 。附件组件可以通过这种方式执行特权操作。
CVSS Information
N/A
Vulnerability Type
N/A