Pdp

The issue allows remote attackers to execute arbitrary programs by using the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files. This handler sends these URIs to explorer.exe, enabling the execution of malicious programs.

The issue allows remote attackers to execute arbitrary code via a crafted PDF file. It is related to the mailto: option and Internet Explorer 7 on Windows XP.

The issue concerns the `login to simulator` method, which sends an MD5 hash in cleartext in the `passwd` field. This allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.

The issue allows remote attackers to obtain sensitive information by querying the browser's session history. This is due to the CheckLoadURI function listing the about: URI as a ChromeProtocol, which can be loaded via JavaScript.

A cross-zone scripting issue allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI. This is executed in a local zone during preview.

The issue allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a `qtnext` parameter that identifies resources outside of the original domain. This can be used to execute arbitrary local files within browsers like Firefox and possibly Internet Explorer.