On: Do Not Type "File:///" in OS X

[taf2]

so, uh anyone else sense a zero day exploit? <a href="File:///<insert code here>">click me</a>... not saying that will work, but usually if you can hard crash something you just found some corruption in memory maybe bad use of memcpy, sprintf instead of snprintf... something along those lines...

[czhiddy → taf2]

Highly unlikely. If you look at the backtrace, it's dying on an assert, not some random memory dereference.

[im3w1l → czhiddy]

Seems to work in email though: http://news.ycombinator.com/item?id=5154915

[KMag → czhiddy]

A remote DoS isn't remote code execution, but it's still an exploit.