Slashdot Mirror


New Vulnerabilities Discovered in Firefox 1.0

jflint writes "Today, the security firm Secunia has released 8 more security vulnerabilities it has discovered in Mozilla products, including Firefox and Thunderbird. The exploits "could be used by criminals to spoof, or fake, various aspects of a Web site, ranging from its SSL secure site icon to the contents of an inactive tab.""

8 of 406 comments (clear)

  1. And there's already a fix? by b00m3rang · · Score: 0, Redundant

    I'll take it.

  2. Why Not Just Tell People to Update by r3v0ltn · · Score: 0, Redundant

    Considering how many people don't RTFA, the post would be more useful if it mentioned the Firefox update.

  3. So, how about Mozilla? by RealAlaskan · · Score: 0, Redundant
    Do these also affect Mozilla 1.7.5? How about 1.8.x?

    God forbid that I should RTFA; after all, this is slashdot.

  4. Where's the update? by teslatug · · Score: 1, Redundant

    What's the use of having an update feature if you never enable it or get it in a working state? I have never been able to update firefox through the built-in feature.

  5. Update download not seeing 1.01 ? by tcc · · Score: 0, Redundant

    Something I didn't like yesterday with my 1.0 I did "check for updates" within firefox, everything was up to date eventhough 1.01 was out for a while... I went on manually downloading the 1.01 update and install it.

    Am I the only one who got this?

    --
    --- Metamoderating abusive downgraders since my 300th post.
  6. Re:Emergency! by spitefulcrow · · Score: 0, Redundant

    Uh... I think I just want some positive karma.

    --
    Sorry, my karma just ran over your dogma.
  7. Mozilla still has a ways to go by klui · · Score: 0, Redundant

    Well, Asa said that automatic updates would be rolled out in phases this week, but although en-US is enabled, my Windows 1.0 doesn't see any updates. I guess the updater needs a bit more work...

  8. Re:New Discovery? by sd.fhasldff · · Score: 0, Redundant

    This isn't new stuff! It's all fixed in 1.0.1. What, exactly, are you thanking Secunia for?