Paul Nickerson

The issue is related to insufficient validation in the Drag and Drop API, which, when combined with social engineering, may allow an attacker to trick end-users into creating a shortcut to local system files. This could potentially be leveraged to execute arbitrary code.

The issue allows remote attackers to cause a denial of service and possibly trigger memory corruption via certain vectors related to specific methods, including `nsTableFrame::GetFrameAtOrBefore`, `nsAccessibilityService::GetAccessible`, `nsBindingManager::GetNestedInsertionPoint`, `nsXBLPrototypeBinding::AttributeChanged`, `nsColumnSetFrame::GetContentInsertionFrame`, and `nsLineLayout::TrimTrailingWhiteSpaceIn`.

The issue is related to multiple unspecified vulnerabilities in the browser engine that can cause a denial of service (crash) due to memory corruption when processing unspecified vectors.

The issue allows remote attackers to execute code at a higher privilege than intended due to certain privileged UI code calling content-defined setters on an object prototype.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML by tricking a user into performing specific actions, such as viewing a broken image with a Javascript URL in the SRC attribute or selecting "Show only this frame" on a frame with a Javascript URL in its SRC attribute.

The issue allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested `javascript:` URLs. This would not cross privilege boundaries if the user installs malicious software from the attacker-controlled site.

The issue allows user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls `window.moveBy`. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.