HomeForumsWhat's newResources 
 
 
Security hole in mozilla/firefox found
IceDigger - Jul 9, 2004
 IceDigger Jul 9, 2004
www.mozilla.com... and update yourself to the latest version.

 Dud Jul 9, 2004

  
	
	
Originally posted by IceMan2k@Jul 9, 2004 @ 08:01 AM

www.mozilla.com... and update yourself to the latest version.


What versions are affected by this? I have 0.9.1

 ExCyber Jul 9, 2004
As far as I know, all Windows versions prior to 0.9.2 are affected, but they don't specifically say. Non-Windows systems are unaffected; this is more a problem with Windows's security model (or lack thereof) than a Firefox bug. You can grab this... to fix the problem (when using Firefox; other URL-interpreting programs probably have the same hole) instead of reinstalling; both ways simply make Firefox reject shell: URLs.

 ExCyber Jul 13, 2004

  
	
	
other URL-interpreting programs probably have the same hole


Sure enough, it's been sighted... in Word and MSN Messenger. Microsoft's response was predictable, and can be summed up by their most famous declaration to the same effect: "That vulnerability is completely theoretical."

 CrazyGoon Jul 13, 2004
I'm all updated to the latest version now. Thanks for the warnings :thumbs-up:

 gameboy900 Jul 13, 2004
And about 6 windows updates in one day later.....

 mtxblau Jul 14, 2004
apt-get install -f

apt-get upgrade --no-checksig

If you don't have apt (for SuSE linux anyways), get it.

 antime Aug 5, 2004
Yet another new version (0.9.3/1.7.2/0.7.3), this time due to security problems in PNG handling.