Several flaws have been discovered in the FireFox and Mozilla browsers, the series of problems being comparable to a “successful” crop of the Internet Explorer: 9 flaws, all detailed on the Mozilla Foundation official page.
According to Ian Latter, an experienced consultant within Pure Hacking, the majority of these flaws is based on the way browsers administer Javascript. There are a few conflicts related to the running of Java components at a certain security level. The result is the modification of settings so that the javascript can change all by itself the application and the result can be the computer’s destabilization or even the revealing of personal information.
Among the nine flaws, three of them are in FireFox, and two of them in Mozilla. One of these bugs is refers to execution scripts of the UI code, assigning incorrect privileges. The scripts from a certain page can overwrite the properties and modes of the DOM components. Mozilla Foundation wont’ give any other details until April 25.
The other problems rated as non-critical might also compromise your system, like allowed execution of the Javascript and cross-site scripting.
Mozilla Foundation announced initially that it won’t publish a new version of the Mozilla suite, but it will provide security patches as new flaws are being discovered. This update, Mozilla 1.7.7, represents the third series of security patches released by Mozilla and FireFox since the end of February.
To avoid any security problems, it is recommended the update to the Mozilla 1.7.7 and FireFox 1.0.3 versions, or to deactivate the Java support. This series of patches didn’t make any changes to the Thunderbird email client.
Originally Posted by Spinecast
Posting Permissions
Reply With Quote
Bookmarks