|
|
|
| Two critical vulnerabilities in Firefox 1.0.3 |
| Monday, May 09, 2005 at 20:28 by Laurence Norah |
Online security advisory firm Secunia have posted details of two extremely critical vulnerabilities in the Mozilla Firefox web browser software. Currently unpatched, the flaws can be exploited to conduct cross site scripting attacks which can result in a user's system being compromised.
The vulnerabilities exist in the latest version of the Firefox product (1.0.3), and it is believed that the Mozilla Foundation are currently working on producing a 1.0.4 release to address the problems.
At the time being users running the Firefox browser are being advised by the Mozilla Foundation to disable Javascript until a fix is issued. It is also recommended that users disable software installation.
These two high severity bugs are not good news for the Firefox browser, which is trying to establish itself as a secure alternative to Internet Explorer. Firefox 1.0.3 was released less than a month ago, and 1.0.2 only three weeks before that. Still, users can gain some solace in the fact that Mozilla do seem to turn bugs around in record time.
When a patch comes out, which we expect to happen very soon, we would strongly urge all Firefox users to install it. In the meantime, either follow the suggestions provided, or use an alternative browser.
|
|
| |
 
|
|
| Wow, thanks for this, I have been using Ffox exclusively since I cannot stand IE and how long it takes to load up. IE also seems to run different stuff on my computer. Looking forward to the patch |
|
|
| Cant be any worse than IE. Even with the holes. |
|
|
| Hmm... I thought Firefox was immune to this stuff. Thats what was claimed when it was launched. |
|
|
| All products are immune when launched, once they get out there people start finding things wrong. |
|
|
| and it's got to be easier to find things that are wrong when the source code is publicly available. |
|
|
| >and it's got to be easier to find things that are wrong when the source code is publicly available.<
If the scumbags are looking harder, then bad things can happen. |
|
|
| Mozilla issued an update - FireFox 1.0.4. Go to mozilla.org and get it, if you use earlier version. |
|
|
|
|
|
|
|
|
