AT&T Tech Support 360
- Related Stories
-
Another denial-of-service bug found in Firefox 2
November 1, 2006 -
Firefox update patches security holes
September 15, 2006
Flaws were found in versions of the open-source software prior to both Firefox 2.0.0.1 and Firefox 1.5.0.9, as well as prior to Thunderbird 1.5.0.9 and SeaMonkey 1.0.7, Mozilla said Tuesday.
The vulnerabilities could potentially be exploited to conduct cross-site scripting attacks, to let malicious attackers launch a remote execution of code on users' computers, and to expose sensitive information, according to an advisory from security company Secunia.
While Mozilla labeled the updates "critical," Secunia rated them "highly critical."
Mozilla advised people to forgo enabling JavaScript in Thunderbird and the mail portions of its Internet application suite SeaMonkey. People are also advised to download SeaMonkey 1.0.7, which is undergoing its final paces of testing.
"Some of these (flaws) were crashes that showed evidence of memory corruption, and we presume that at least some of these could be exploited to run arbitrary code with enough effort," according to one of six-related "critical" Mozilla security advisories issued Tuesday.
Last month, Mozilla also issued "critical" security updates for Firefox, Thunderbird and SeaMonkey. Like the new flaws, the earlier ones involved the potential for malicious attackers to take hold of users' systems.
See more CNET content tagged:
Mozilla Thunderbird,
Mozilla Corp.,
security update,
XSS,
Firefox
"While Mozilla labeled the updates "critical," Secunia rated them "highly critical.""
Of course Mozilla ONLY labeled the updates "critical", Mozilla's impact key ONLY goes up to critical.
This is just poor journalism.
generalization. Frankly, my guess would be that most FF users
don't even know what NoScript is/does.
test here: http://www.info-svc.com/news/11-21-2006/rcsr1/
test here: http://www.info-svc.com/news/11-21-2006/rcsr1/
Opera 9 - 2 patched
http://secunia.com/product/10615/?task=advisories
FF 2 - 1 patched; 1 unpatched
http://secunia.com/product/12434/?task=advisories
IE 7 - 3 unpatched
http://secunia.com/product/12366/?task=advisories
Safari 2 - 2 patched; 3 unpatched
http://secunia.com/product/5289/?task=advisories
Hmmm...
Afterall, it's much more likely to find flaws for something that is used by more than 80% (overal percentage, not IE7-specific, but still a metric) of people, wouldn't you agree?
Watch this space...
Their is no truth to be found. It's all a one sided story. The only real difference between any of us is which side we choose to believe.
- @FOSS4evR
-
by anarchyreigns
December 22, 2006 1:05 PM PST
- Look, you sack of ****, here are just two here. I'll leave it to you with your third grade education to find the rest. Ya know, why don't you do us all a favor and leave this board, as it's the low rent wannabees who have no understanding of how little they know, that ruin it for the rest of us?
-
Reply to this comment
-
-
- I disagree.
-
by System Tyrant
December 22, 2006 1:19 PM PST
- It's people like you that ruin it for the rest of us. You are the sore thumb here. Even your nickname says that.
-
-
See all 22 Comments >>http://news.yahoo.com/s/nf/20061220/bs_nf/48890
http://www.cio-today.com/news/Mozilla-Patches-Firefox-and-Thunderbird/story.xhtml?story_id=110003SJ1ECS
Why don't you leave and find some place else to insult people.