Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Firefox exploit targets zero day vulns
John Leyden, The Register 2005-05-09

Security researchers have discovered two unpatched vulnerabilities in Firefox, the popular alternative web browser. The security bugs affect even the latest version of Firefox (version 1.0.3) and create a means for attackers to seize control of vulnerable systems using cross-site scripting attacks.

Comments Mode:
Firefox exploit targets zero day vulns 2005-05-09
TJ (4 replies)
Firefox exploit targets zero day vulns 2005-05-10
David Prinzing
Firefox exploit targets zero day vulns 2005-05-10
Anonymous (2 replies)
Firefox exploit targets zero day vulns 2005-05-10
David Prinzing
Firefox exploit targets zero day vulns 2005-05-10
Anonymous (2 replies)
Firefox exploit targets zero day vulns 2005-05-10
Anonymous (1 replies)
MS products do not have more vulnerabilities because they are popular. They have more vulnerablilities because they are more vulnerable.

Being popular is what causes them to inflict such horrible damage when a vulnerability is exploited.

I use Firefox on Mandrake Linux. I turned off the features suggested. It took about 4 seconds. There will be a revised version of Firefox in the pipe fairly quickly.

Microsoft releases patches monthly. Firefox releases them the moment they are ready. This responsive process, in itself, is inherently more secure because known vulnerabilities get less chance to propogate.

I don't see what popularity has to do with it. Popularity did not require the writing of vulnerabilities. That's something Microsoft did all on its own and formerly claimed as 'features'.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11119/31829#31829
Firefox exploit targets zero day vulns 2005-05-11
Coldman (2 replies)
Firefox exploit targets zero day vulns 2005-05-12
Anonymous (1 replies)







 

Privacy Statement
Copyright 2009, SecurityFocus