Slashdot Mirror
Big Day For Browser Vulnerabilities
An anonymous reader writes "All browsers have been reported vulnerable to different vulnerabilities today. Starting with: Internet Explorer on XP SP1/SP2, which suffers a new system compromise (of course) vulnerability. Continuing with: Opera, Mozilla / Mozilla Firefox / Camino, Safari, Netscape, Konqueror, Avant Browser and Maxthon, which all suffers some new spoofing vulnerabilitities. Demonstrations of the spoofing vulnerabilities are available here and here."
Who will get the fixes out first. If I was a betting man, I would say Mozilla.
Free Desk
Us geezers sometimes like to toss a banana into the monkey cage just to see them go nuts and start flinging feces. ;-)
The mozilla problem is serious? Maybe seriously laughable. At first I thought it was something important, like a form of clientside crosssite scripting, but just popping up an input box? As if any site actually uses those, its going to instantly look out of place. If anything a better exploit would be to pop up a Last Measure-ish popup that dances around the screen, then try to abuse the IE drag/drop exploit from it to the new window to possibly run new code , but even thats unlikely.
As it is, this exploit is as pathetic as most spoofing exploits. If you wan't a real spoof, look for the mozilla bugzilla post about the XUL one, where you can entirely replicate a fake paypal and make your own 'site is authenticated' xul windows.
Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
An IRC quote that sums it up for me. :)
{@BlindSite} unless your a labotamised ginger midget with a blonde gene, mozilla is very easy to use.
Taken from i-rox.
'nuff said.
feh. stuff.