Top
image credit: Z Jason / Flickr

Old known issue in Firefox allows HTML files to steal other files from victim’s system

The security expert Barak Tawily demonstrated that opening an HTML file on Firefox could allow attackers to steal files stored on a victim’s computer due to a 17-year-old known bug in the browser.

The researcher published the details of the attack through TheHackerNews website and demonstrated that his technique works against the latest version of Firefox.

“Barak Tawily, an application security researcher, shared his findings with The Hacker News, wherein he successfully developed a new proof-of-concept attack against the latest version of Firefox by leveraging a 17-year-old known issue in the browser.” reported TheHackerNews.

Read More on Security Affairs