Home Discord Chat
Go Back   ChiefsPlanet > Nzoner's Game Room
Reload this Page FireFox Browsers Suceptible to Malicious Code... Here's the temp fix...
Register FAQDonate Members List Calendar

Reply
Page 1 of 2 1 2
 
Thread Tools Display Modes
Old 05-09-2005, 02:40 PM  
Taco John Taco John is offline
Sapere Aude
 
Taco John's Avatar
 
Join Date: Jun 2001
Casino cash: $427937
FireFox Browsers Suceptible to Malicious Code... Here's the temp fix...
The fix: Users can protect themselves by temporarily disabling JavaScript, according to Mozilla.




The problem:


May 9, 2005
Two Holes Poke Firefox Veneer
By Tim Gray


It seems Mozilla's Firefox, the undisputed darling of the alternative browser set, isn't immune after all to the slings and arrows suffered by other popular interfaces.

On Saturday the Greyhats Security Group punctured the browser's aura of invincibility after it released details of two flaws that allow a malicious site to execute arbitrary code.

The advisory explains that the successful attacks involve two elements. The first flaw fools the browser into thinking software is being installed by a "whitelisted site." The second flaw occurs when the software installation trigger does not sufficiently check icon URLs containing JavaScript code.

Users can protect themselves by temporarily disabling JavaScript, according to Mozilla.

Less than a week after the foundation trumpeted breaking the 50 million download mark, the browser is dealing with what has been called by Danish security firm Secunia its first "extremely critical" bug.

The Mozilla Foundation said there are currently no known active exploits of these vulnerabilities, although a "proof of concept" has been reported.

Greyhats said an attacker can first use frames and a JavaScript history flaw to make it appear that a software installation is being triggered from add-ons.update.mozilla.org.

As the JavaScript is executed from the chrome, it has "full chrome privileges" and can "do anything that the user running Firefox can."

"Mozilla is aggressively working to provide a more comprehensive solution to these potential vulnerabilities and will provide that solution in a forthcoming security update," the foundation said on its Web site.

Numerous security outfits agree with the foundation's suggestions of disabling JavaScript as a workaround.

"We believe this means that users who have not added any additional sites to their software installation whitelist are no longer at risk," Mozilla Foundation said in a statement.


http://www.internetnews.com/security...le.php/3503506
Posts: 79,765
Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 02:41 PM   #2
Taco John Taco John is offline
Sapere Aude
 
Taco John's Avatar
 

Join Date: Jun 2001
Casino cash: $427937
You probably won't have to worry about it if you don't surf for porn, warez, or serialz.
__________________
Ehyeh asher ehyeh.

Donger's Razor: "The most establishment-friendly explanation that gives leftist and neocon politicians the most amount of cover is the only possible explanation, even when gaping holes and leaps of logic are required to get there."
Posts: 79,765
Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.Taco John is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 02:43 PM
ENDelt260
This message has been deleted by ENDelt260.
Old 05-09-2005, 02:44 PM   #3
dirk digler dirk digler is offline
Please squeeze
 
dirk digler's Avatar
 

Join Date: Jul 2003
Location: Clinton, MO
Casino cash: $114644
Quote:
Originally Posted by ENDelt260
Start the countdown to Parker's appearance in this thread.
No shit I am glad I didn't post this. He rips me every time when I mention FireFox.

Anyway shouldn't this be in Geeksplanet?
Posts: 67,118
dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 02:46 PM   #4
teedubya teedubya is offline
Most Valuable Poster
 
teedubya's Avatar
 

Join Date: Oct 2003
Casino cash: $8993042
Quote:
Originally Posted by dirk digler
No shit I am glad I didn't post this. He rips me every time when I mention FireFox.

Anyway shouldn't this be in Geeksplanet?
It will be, Dirk... IT WIIIIILLL BEEEEEEEE. [/ yoda]
Posts: 36,832
teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 02:46 PM   #5
Ultra Peanut Ultra Peanut is offline
v^V^v^V^v^V^
 
Ultra Peanut's Avatar
 

Join Date: Aug 2001
Location: Holland*
Casino cash: $10005177
Quote:
Originally Posted by ENDelt260
Start the countdown to Parker's appearance in this thread.
__________________
Posts: 39,518
Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.Ultra Peanut is blessed with 50/50 Hindsight.
     Reply With Quote
Old 05-09-2005, 02:47 PM   #6
Chest Rockwell Chest Rockwell is offline
Y'all are brutalizin' me!
 
Chest Rockwell's Avatar
 

Join Date: Jan 2004
Location: Jim Bob Cooter 4 Heisman
Casino cash: $10000985
Quote:
Originally Posted by Taco John
You probably won't have to worry about it if you don't surf for porn, warez, or serialz.
Yeah, what am I, made of stone?

Thanks for the heads up.
__________________

MASTER CYLINDER!
Posts: 1,096
Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.Chest Rockwell would the whole thing.
     Reply With Quote
Old 05-09-2005, 02:48 PM   #7
dirk digler dirk digler is offline
Please squeeze
 
dirk digler's Avatar
 

Join Date: Jul 2003
Location: Clinton, MO
Casino cash: $114644
Quote:
Originally Posted by Ali Chi3fs
It will be, Dirk... IT WIIIIILLL BEEEEEEEE. [/ yoda]
Thanks Yoda!
Posts: 67,118
dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.dirk digler is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 02:51 PM   #8
Mr. Laz Mr. Laz is offline
Don't Tease Me
 
Mr. Laz's Avatar
 

Join Date: Dec 2000
Location: KS
Casino cash: $11047037
Quote:
Originally Posted by ENDelt260
Start the countdown to Parker's appearance in this thread.
russ or parker ... who shows themselves first?




"buh,buh, but ... everyone here says firefox is perfect"

"everyone knows that only IE has security issues ..."

"only the geniouses says that ..."


__________________
Posts: 95,626
Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.Mr. Laz is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 03:01 PM   #9
tk13 tk13 is offline
...
 
tk13's Avatar
 

Join Date: Nov 2001
Casino cash: $-1907500
The invincible Firefox, busted AGAIN!!!

(Sorry, wanted to be the first to do that.)
Posts: 56,727
tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.tk13 is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 03:04 PM   #10
morphius morphius is offline
World's finest morphius
 
morphius's Avatar
 

Join Date: Aug 2000
Casino cash: $5725027
I believe the MAC Safari browser was shown to have a mighty huge whole in it as well.

http://it.slashdot.org/it/05/05/08/2...&tid=179&tid=3
Posts: 26,023
morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.morphius is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 03:10 PM   #11
|Zach| |Zach| is offline
For The Glory Of The City
 
|Zach|'s Avatar
 

Join Date: Sep 2002
Location: Kansas City
Casino cash: $3016768
I still love me some Firefox.
Posts: 54,737
|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 03:12 PM   #12
PhogPhanTim PhogPhanTim is offline
Starter
 
PhogPhanTim's Avatar
 

Join Date: Mar 2005
Casino cash: $10004900
Gotta agree.

Anyone blind enough to still think IE is better than FireFox is a fool. A damn fool.
Posts: 41
PhogPhanTim is a favorite in the douche of the year contest.PhogPhanTim is a favorite in the douche of the year contest.
     Reply With Quote
Old 05-09-2005, 03:13 PM   #13
HC_Chief HC_Chief is offline
That's just f***in' stupid
 
HC_Chief's Avatar
 

Join Date: Aug 2000
Location: suburbia
Casino cash: $3687107
The greater the distribution of the product, the more likely flaws/security 'holes' will be uncovered. It's the nature of the beast.
__________________
"Gentlemen, you can't fight in here, this is the war room!"
Posts: 12,355
HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.HC_Chief is blessed with 50/50 Hindsight.
     Reply With Quote
Old 05-09-2005, 03:13 PM   #14
|Zach| |Zach| is offline
For The Glory Of The City
 
|Zach|'s Avatar
 

Join Date: Sep 2002
Location: Kansas City
Casino cash: $3016768
Quote:
Originally Posted by PhogPhanTim
Gotta agree.

Anyone blind enough to still think IE is better than FireFox is a fool. A damn fool.
Posts: 54,737
|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.|Zach| is obviously part of the inner Circle.
     Reply With Quote
Old 05-09-2005, 03:19 PM   #15
ChiefsOne ChiefsOne is offline
Veteran
 
ChiefsOne's Avatar
 

Join Date: Oct 2000
Location: Springfield, MO
Casino cash: $5058192
I use Camino and don't have any problems.
Posts: 2,284
ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.ChiefsOne is not part of the Right 53.
     Reply With Quote
Reply
Page 1 of 2 1 2

« Previous Thread | > Nzoner's Game Room < | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Forum Jump




All times are GMT -6. The time now is 04:21 PM.

Contact Us - ChiefsPlanet - Archive - Top

This is a test for a client's site.
Fort Worth Texas Process Servers
Covering Arlington, Fort Worth, Grand Prairie and surrounding communities.
Tarrant County, Texas and Johnson County, Texas.
Advertise with us!
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.