Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

Bugs found in Firefox and Mozilla, again

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
Nomad559 Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 06:21 AM
Original message
Bugs found in Firefox and Mozilla, again
Bugs found in Firefox and Mozilla, again

Security outfit Secunia said it has found mistakes in Open Source browser Firefox and its retired parent Mozilla.

According to letter from Secunia, here, the SNAFU is in the Javascript "engine" and puts users at risk of information disclosure attacks.

It causes problems for Firefox 1.0.1 and 1.0.2, the two latest browser releases from the open-source foundation. It also affects the suite. The problem is caused due to an error in the JavaScript engine, as a 'lambda' replace exposes arbitrary amounts of heap memory after the end of a JavaScript string.

On its site, Secunia has released an online test to allow Firefox and Mozilla users to determine if they are affected by the bug. The company suggest that JavaScript support be disabled until someone gets around to fixing the flaw.


http://secunia.com/advisories/14820
Printer Friendly | Permalink |  | Top
SHRED Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 06:31 AM
Response to Original message
1. Thanks
My AVG virus scanner caught a Trojan the other day that was attempting to install through Sun Java/Mozilla 1.7.5 exploit. Suprised me!
Printer Friendly | Permalink |  | Top
 
Spacemom Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 06:43 AM
Response to Original message
2. Am I doing the right thing?
There are 2 boxes. Enable Java and Enable Javascript. Do I need to uncheck both or just the javascript??

Thanks for helping the computer illiterate. :D
Printer Friendly | Permalink |  | Top
 
Wilber_Stool Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 06:48 AM
Response to Reply #2
3. Just disable
Javascript. I just did and retested and came up clean.
Printer Friendly | Permalink |  | Top
 
Mnemosyne Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 07:00 AM
Response to Original message
4. Wow, I tested and suddenly everything shut down
due to serious error.

Any suggestions as to what I should do? I'm not very computer literate.

Thanks so much.
Printer Friendly | Permalink |  | Top
 
Kellanved Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 07:09 AM
Response to Original message
5. The bug is already fixed in the 1.0.3 Release Candidate
Edited on Tue Apr-05-05 07:30 AM by Kellanved


Don't download, unless you really know what you're doing. I expect the formal release of 1.0.3 in the near future. It is amazing how fast the Mozilla people update their code.
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/aviary1.0.1-l10n-candidates/
Printer Friendly | Permalink |  | Top
 
progressor Donating Member (116 posts) Send PM | Profile | Ignore Tue Apr-05-05 07:23 AM
Response to Reply #5
7. "It is amazing how fast the Mozilla people update their code."
Indeed. They're great.

Too bad M$, with their billions in the bank, still can't release a stable, secure, and standards compliant product.
Printer Friendly | Permalink |  | Top
 
Kellanved Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Apr-05-05 07:25 AM
Response to Reply #7
8. And to save their reputation:
this particular bug is an eight year old Netscape legacy. It is a fossil from the closed-source time.
Printer Friendly | Permalink |  | Top
 
progressor Donating Member (116 posts) Send PM | Profile | Ignore Tue Apr-05-05 07:21 AM
Response to Original message
6. Not even gonna bother...
Too many sites rely on JavaScript for functionality to be worried about a minor exploit that, know the team over at Mozilla, will be fixed rapidly.

Sounds like somebody at the Inquirer's got a bone to pick ("Mozzarella foundation"? "FireRodent"?) and when he can code a completely secure browser, I'll listen to what he has to say. Firefox still blows IE out of the water in terms of security and it's made by volunteer labor! Think about Microsoft's resources vs. Mozilla's and maybe this Nick Farrell character should ask "Can't these people code?" of Microsoft instead? Somehow, I get the sense that they're on the M$ payroll. Or at least fellating them, based on a number of their articles.

That said, security is less of a reason for me to use Firefox. I tend not to visit disreputable sites that would potentially use this exploit.

As a web designer, I appreciate that the Mozilla engine has the absolute best standards support of any browser available - right alongside Safari and Opera, to a lesser extent.
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Wed May 01st 2024, 06:32 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC