Author |
Topic: Mozilla bug alert (Read 138 times) |
|
ExplodingEyeBall
New Board Hall of Famer
I can't think of anything clever to put here.
Gender: 
Posts: 2589
|
 |
Mozilla bug alert
« on: Sep 15th, 2005, 10:54am » |
 Quote  Modify
|
Security Alert, September 15, 2005
Critical Bug in Firefox, Mozilla, and Netscape Browsers
Tom Ferris reported a buffer overflow vulnerability in Firefox Web browsers. The vulnerability exists because of faulty URL processing and could lead to the execution of remote code. The problem has been reported to affect Firefox 1.0.6 and Firefox 1.5 Beta, as well as Netscape 8.0.3.3 and Mozilla 1.7.11 because they share Firefox's code base. Previous versions of these browsers might also be affected.
A simple workaround prevents the browser vulnerability from being exploited. Mozilla Foundation released a self-installing patch (in an XPI file) that contains a workaround that disables International Domain Name (IDN) processing. The workaround changes a configuration parameter, network.enableIDN, to false. Alternatively, you can enter
about:config
in the address bar, search for the parameter, and reset it to false. At least one person reported that the same workaround and XPI file can be applied to the Netscape browser. For links to the patch and further details, read this article on our Web site.
http://list.windowsitpro.com/t?ctl=13AF5:3CA24
Thank you for subscribing to Security UPDATE. Please tell your friends about this newsletter and alert list!
This email newsletter is brought to you by Windows IT Security, the leading publication for IT professionals securing the Windows enterprise from external intruders and controlling access for internal users. Subscribe today.
http://list.windowsitpro.com/t?ctl=13AF4:3CA24
|
|
 IP Logged |
Just poke out my eye and get it over with!!!
|
|
|
pattik
CH.com Alumnus
New Board Hall of Famer
 
Gender: 
Posts: 2404
|
|
Re: Mozilla bug alert
« Reply #1 on: Sep 15th, 2005, 11:12am » |
Quote Modify
|
Thanks, Pat. I don't understand it, but I installed the patch.
Thanks 
|
|
IP Logged |
The voyage of discovery is not about seeking new landscapes, it's about having new eyes--Marcel Proust
|
|
|
rextangle
Guest
|
Thanks Pat! 
|
|
IP Logged |
|
|
|
Jasmyn
CH.com Alumnus
New Board Hall of Famer
Each day will be a new trick in life's journey
Gender:
Posts: 2762
|
|
Re: Mozilla bug alert
« Reply #3 on: Sep 16th, 2005, 8:32am » |
Quote Modify
|
Thanks exploding balled eye guy! 
|
|
IP Logged |
Jazz
Madness is proclaimed by society’s inability to accept its own infallibility
|
|
|
|
|
|
Home
Help
Search
Members
Member Map
Login
Register
Reply
Notify of replies
Send Topic
Print
Remove
test rss