CERT Recommends Mozilla, Firefox

EvilStein writes "According to this article, "CERT recommends that Explorer users consider other browsers that are not affected by the attack, such as Mozilla, Mozilla Firefox, Netscape and Opera." Quite a statement from CERT - this is related to a fairly recent IIS or IE exploit that has already affected some high traffic web sites, such as the Kelley Blue Book website."

Comments

Re:When there's no other fix...

[papercut2a]

A local newscast in Atlanta last night mentioned switching to Mozilla or Opera to avoid the problem (although it was clear from her expression and slightly stumbling speech that the bleachblondenewsbimbo doing the reporting had no clue what either of them was--she probably thought Mozilla was a type of cheese).

Re:A list of sites

[R-66Y]

We have a problem: grep doesn't exist on any computer that has a lot of browsing activity.

(Please go easy on me, it's a joke.)

Later,
Patrick

Warning for Firefox users!

[jesser]

An exploit has been discovered that can cause you to open a web site in Internet Explorer, which can then lead to a system compromise. Disabling JavaScript in Firefox does not make you immune. The full text of the exploit follows.

<b>Sorry, this site requires Microsoft Internet Explorer.</b>

The workaround is to e-mail the site admin, telling them that they are promoting the insecure practice of using Internet Explorer for sites that claim to require it. Unfortunately, some sites require Internet Explorer even to contact the site admin, leading to a catch-22.