[webwithout-ie] Fw: Internet and Technology News Critical flaws found in Firefox

  • From: "david poehlman" <david.poehlman@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: <webwithout-ie@xxxxxxxxxxxxx>
  • Date: Tue, 10 May 2005 11:10:14 -0400

----- Original Message ----- 
From: "Parker" <parker@xxxxxxxxxxxxxxxxxxxxxx>
To: "Internet News" <inter@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Tuesday, May 10, 2005 11:00 AM
Subject: Internet and Technology News Critical flaws found in Firefox


BBC NEWS
Critical flaws found in Firefox
The Mozilla Foundation has said it is "working aggressively" to fix two
flaws in
its open source Firefox browser.
The vulnerabilities, reported on Saturday, were identified as "very
critical", but
no cases had been reported of them being exploited.
Several security firms identified the flaws which could let websites run
malicious
code on a person's computer.
Mozilla has responded by changing its update service and says people should
temporarily
turn off JavaScript code.
Manual downloads
The first flaw reported fools the browser into thinking software is being
installed
by a legitimate, or safe, website.
The second flaw happens when the software installation trigger does not
properly
check icon web addresses which contain JavaScript code.
A hacker could potentially take advantage of the security flaws to secretly
launch
malicious code or programs.
Mozilla advised people to download add-ons to its software manually from the
Foundation's
site.
Danish security firm Secunia said called the flaws "extremely critical"
because cookie
and history information could be used to get access to personal information
or gain
access to sites previously visited.
The Mozilla Foundation, which developed the browser, said it was working
hard to
provide a comprehensive and more permanent fix for the problems.
Main competition
Last week, Firefox celebrated its 50 millionth download since its official
launch
in November.
Firefox is Microsoft Internet Explorer's (IE) main rival in the browser
market. Many
like it because it is easily customised, and others say it has fewer
security flaws
than IE.
Being open source means people can adapt the software's core code to create
innovative
features, such as add-ons, RSS news feed readers, or extensions to the
program.
The Mozilla Foundation was set up by former browser maker Netscape in 1998.
Netscape
dominated the browser market in the early 1990s.
Microsoft releases its next-generation IE7 later this year which promises to
be more
secure.
Story from BBC NEWS:
http://news.bbc.co.uk/go/pr/fr/-/2/hi/technology/4532127.stm
Published: 2005/05/10 09:13:43 GMT
© BBC MMV



We supply this information  as a service and do
not endorse it or recommend any action being taken based upon it.  Any
decisions taken, by the subscriber, are entirely your own responsibility.
This is an announce only list.  All replies will go only to the list
moderator.
Our subscribers are the source of some of the material posted to this list.
If you have an article you believe to be suitable for this list, send it to.
mailto:peepslistmanager@xxxxxxxxx
If we agree, it will be posted to the list.
To unsubscribe from this list, press Enter on the link below.  A
pre-addressed message will pop up, simply send it.
mailto:inter@xxxxxxxxxxxxxxxxxxxxxx?subject=unsubscribe
If you wish to recommend this list to a friend, send the following link to
them.
mailto:inter@xxxxxxxxxxxxxxxxxxxxxx?subject=subscribe
We hope that you're enjoying this list.
www.accessible-devices.com



***list info***
This is the accessible web withoutinternet explorer discussion list.
to change your subscription options or to unsubscribe, point your favorite 
browser to:
//www.freelists.org/list/webwithout-ie

You can view this list's archives and rss feed at:
//www.freelists.org/archives/webwithout-ie

for unsubscribing, you can also send a message with the word unsubscribe in the 
subject line leaving the rest of the message blank to:
webwithout-ie-request@xxxxxxxxxxxxx
and you will need to respond to the confirmation message you recieve in order 
to be removed from the list.

for subscribing or resubscribing
you can also send a message with the word subscribe in the subject line leaving 
the rest of the message blank to:
webwithout-ie-request@xxxxxxxxxxxxx
and you will need to respond to the confirmation message you recieve in order 
to be added to the list.

To contact list management, write to:
webwithout-ie-admins@xxxxxxxxxxxxx
***end of list info***

Other related posts:

  • » [webwithout-ie] Fw: Internet and Technology News Critical flaws found in Firefox