Slashdot Mirror

← Back to Stories (view on slashdot.org)

Firefox Quickies

Posted by kdawson on from the three-twisty-little-items-all-different dept.

First, Gypsy2012 writes with a highly critical security flaw involving both Firefox 2.0 and Internet Explorer, which could allow a malicious attacker to gain remote control of a user's system. It exploits the "firefoxurl://" URI handler. ... Next, reader dsinc sends word that the beta for Firefox 3 has slipped by 6 weeks. The new target date is September 18 at the earliest. The article wonders whether the final release will slip into 2008. ... Finally, reader jktowns points out new anti-phishing features in the latest nightly build of Firefox 3. One of them was added into the code base by the guy who developed the LocationBar2 extension.

2 of 245 comments (clear)

  1. Re:What OS by blhack · · Score: 5, Insightful

    well...if you read the article you would find that this bug effects Internet Explorer users, not firefox users. The exploit has firefox as a dependency, but is actually called from IE.

    --
    NewslilySocial News. No lolcats allowed.
  2. Free Diease. Now pay for the Cure. by BillGatesLoveChild · · Score: 4, Insightful

    Firefox hasn't released a fix for this, and there is no mention of it on their web site.

    Now this blows:

    http://secunia.com/advisories/25984/
    > Solution:
    > Do not browse untrusted sites.
    > Disable the "Firefox URL" URI handler.

    The first is impractical. The second begs the question, "Sure, How?" Read on:

    > Extended Solution:
    > The "Extended Solution" section is available for Secunia customers only.
    > Request a trial and get access to the Secunia Customer Area and Extended Secunia advisories.

    So these guys are publishing zero day security flaws, then making you reach for your credit card. Very grubby.

    The CNET article doesn't tell you what the fix is either. Google has nothing. Anyone?