Sidebar allows an attacker to link to the privileged content (such as about:config) and run arbitrary code on the content. This is a firefox specific bug.
Created attachment 112256 [details] Demo exploit from the Mozilla BTS Steps to Reproduce: 1. Bookmark testcase as sidebar panel 2. Click links in order
Created attachment 112257 [details] add sidebar panel page add sidebar panel page Use this page to add the testcase to bookmark panel.
Steps to Reproduce (corrected): 1. Bookmark testcase as sidebar panel 2. Select "Sidebar Attack Test" from your bookmark and load it in the sidebar 3. Click links in order
Created attachment 112258 [details] testcase 2 This test case will erase localstore.rdf file in your profile directory.
Created attachment 112259 [details] add sidebar panel page 2 Use this page to add the testcase 2 to bookmark panel.
Created attachment 112260 [details] testcase 3 - "Plug-ins Finder" "data:" URL example.
Lifting embargo
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2005-336.html