BleepingComputer.com: Flaw found in Firefox 1.0.1 and 1.0.2

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Flaw found in Firefox 1.0.1 and 1.0.2 Security >> Privacy & data protection

#1 User is offline   KoanYorel 

  • Bleepin' Conundrum
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Staff Emeritus
  • Posts: 19,461
  • Joined: 26-April 04
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA

Posted 05 April 2005 - 07:14 PM

<img src='/images/misc/rediscover.gif' style='float:right' vspace='8' hspace='8'> <b>Flaw found in Firefox</b><br /><br />Published: April 5, 2005, 2:24 PM PDT<br /> By Dawn Kawamoto<br /> Staff Writer, CNET News.com<br /> <br /> "A flaw has been discovered in the popular open-source browser Firefox that could expose sensitive information stored in memory, Secunia has warned."<br /> <br /> Firefox versions 1.0.1 and 1.0.2 contain the vulnerability...<br /> <br /> An exploit may disclose sensitive information in the memory...<br /> <br /> Mozilla is working on a patch, and no cases have been reported yet.<br /><br /> <div class='newslinks'><img src='http://www.bleepingcomputer.com/forums/public/style_images/1/cs_page.gif'>&nbsp;<b>Link: <a href='http://news.com.com/Flaw+found+in+Firefox/2100-1029_3-5655861.html?tag=nefd.top' target='_blank'><font color='red'>Complete details at CNET News</font></a><br /><img src='http://www.bleepingcomputer.com/forums/style_images/1/cs_page.gif'>&nbsp;<b>Link: <a href='http://secunia.com/mozilla_products_arbitrary_memory_exposure_test/' target='_blank'><font color='red'>Secunia has developed a test - check your Firefox version</font></a><br />
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)

#2 User is offline   jgweed 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 27,603
  • Joined: 11-April 04
  • Gender:Male
  • Location:Chicago, Il.

Posted 06 April 2005 - 12:03 PM

At the same time, additional flaws were published about IE and Explorer. Let's see whether MS or Mozilla patches their problems first.
Regards,
John
Whereof one cannot speak, thereof one should be silent.

#3 User is offline   jgweed 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 27,603
  • Joined: 11-April 04
  • Gender:Male
  • Location:Chicago, Il.

Posted 07 April 2005 - 11:15 AM

Mozilla is preparing a new release to patch these vulnerabilities, and already has release candidates:

http://www.mozillazine.org/talkback.html?article=6336

Regards,
John
Whereof one cannot speak, thereof one should be silent.

#4 User is offline   yano 

  • I can see what you post!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 6,469
  • Joined: 14-February 05
  • Gender:Male

Posted 07 April 2005 - 04:37 PM

I did a test to see if i'm vulnerable, i must be cause i got a bleep load of text plus on the 3rd time i tested it, firefox automatically shut down :thumbsup:

#5 User is offline   yano 

  • I can see what you post!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 6,469
  • Joined: 14-February 05
  • Gender:Male

Posted 08 April 2005 - 08:38 AM


#6 User is offline   jgweed 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 27,603
  • Joined: 11-April 04
  • Gender:Male
  • Location:Chicago, Il.

Posted 10 April 2005 - 09:08 PM

Firefox to issue patch as soon as this weekend! I guess we know who takes security seriously, and it isn't MS! Watch for the new FF release, 1.0.3.

http://www.eweek.com/article2/0,1759,1784227,00.asp

Regards,
John
Whereof one cannot speak, thereof one should be silent.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users