, The Register 2005-05-09
Security researchers have discovered two unpatched vulnerabilities in Firefox, the popular alternative web browser. The security bugs affect even the latest version of Firefox (version 1.0.3) and create a means for attackers to seize control of vulnerable systems using cross-site scripting attacks.
Expand all |
Post comment
Firefox exploit targets zero day vulns
2005-05-09
TJ (4 replies)
TJ (4 replies)
Firefox exploit targets zero day vulns
2005-05-10
Anonymous (2 replies)
Anonymous (2 replies)
Firefox exploit targets zero day vulns
2005-05-11
Coldman (2 replies)
Coldman (2 replies)

Being popular is what causes them to inflict such horrible damage when a vulnerability is exploited.
I use Firefox on Mandrake Linux. I turned off the features suggested. It took about 4 seconds. There will be a revised version of Firefox in the pipe fairly quickly.
Microsoft releases patches monthly. Firefox releases them the moment they are ready. This responsive process, in itself, is inherently more secure because known vulnerabilities get less chance to propogate.
I don't see what popularity has to do with it. Popularity did not require the writing of vulnerabilities. That's something Microsoft did all on its own and formerly claimed as 'features'.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/11119/31829#31829