Reply to this topic Topic Options
2 Pages V   [1] 2 ... Next
Mozilla Firefox Vulnerability effects 0.9.3?, does with me :s
Does this spoof effect you with Mozilla Firefox 0.9.3???
You cannot see the results of the poll until you have voted. Please login and cast your vote to see the results of this poll.
Total Votes: 34
Guests cannot vote
sinatosk
Post #1 Aug 4 2004, 18:52


Neowinian Senior
Group Icon

Group: Registered
Posts: 1,096
Joined: 12-February 02
From: United Kingdom
Member No.: 9,532
I installed Mozilla Firefox 0.9.3 earlier today and then later on just for the fun of it I decided to check to see if the vulnerability still effected me... strangly it does...

I was wondering if anyone else with Mozilla Firefox 0.9.3 is still being effected. link is below.

http://www.nd.edu/~jsmith30/xul/test/spoof.html
Profile Card PM + Reply to Post Go to the top of the page

Log In or Register · Advertise on Neowin
vetPink Floyd
Post #2 Aug 4 2004, 19:01


A poor man's memory
Group Icon
Group Icon

Group: vetVeteran
Posts: 12,934
Joined: 6-January 03
From: Behind the Wall
Member No.: 21,291
this is supposed to be fixed with 0.9.3
Profile Card PM + Reply to Post Go to the top of the page
Zycoflow
Post #3 Aug 4 2004, 19:04


All around cool dude....
Group Icon

Group: Registered
Posts: 78
Joined: 24-June 04
From: HIDDEN!!!
Member No.: 60,231
Yep it still happens on my pc....... blink.gif no.gif
Profile Card PM + Reply to Post Go to the top of the page Email Poster
sinatosk
Post #4 Aug 4 2004, 19:08


Neowinian Senior
Group Icon

Group: Registered
Posts: 1,096
Joined: 12-February 02
From: United Kingdom
Member No.: 9,532
phew... least I know it's not just me then
Profile Card PM + Reply to Post Go to the top of the page
Jasur
Post #5 Aug 4 2004, 19:08


Neowinian UNSTOPPABLE
Group Icon

Group: Registered
Posts: 7,971
Joined: 5-November 02
From: Sydney, Australia
Member No.: 18,699
LOLOLOL

Yep still happens.

Funny and ironic as isnt just IE that has **** ups with patches/bug fixes.
Profile Card PM + Reply to Post Go to the top of the page Email Poster
em_te
Post #6 Aug 4 2004, 19:11


Awan Afuqya
Group Icon

Group: Registered
Posts: 1,613
Joined: 16-June 03
Member No.: 30,836
I think Firefox should have followed IE's lead in making the content area sunken into the browser window. It allows you to tell whether something is part of the browser window or not regardless of whether anything is spoofed.

http://www.neowin.net/forum/index.php?showtopic=192796
Profile Card PM + Reply to Post Go to the top of the page
Infamous Cow
Post #7 Aug 4 2004, 19:38


b0b
Group Icon

Group: Registered
Posts: 1,225
Joined: 22-January 04
From: UConn
Member No.: 45,808
I bet Microsoft is paying people to try to **** around with the firefox source code.
Profile Card PM + Reply to Post Go to the top of the page Email Poster
dL
Post #8 Aug 4 2004, 19:40


Source of the Future
Group Icon

Group: Registered
Posts: 3,353
Joined: 15-May 03
From: Vancouver, B.C.
Member No.: 28,244
What spoof? huh.gif

Too lazy to read and comprehend. Someone wanna explain for me? smile.gif

dL
Profile Card PM + Reply to Post Go to the top of the page Email Poster
Rudy
Post #9 Aug 4 2004, 19:48


Neowinian ULTRAKILL
Group Icon

Group: Registered
Posts: 13,450
Joined: 30-September 01
From: Ottawa, On
Member No.: 1,419
thats so funny, they made fun of IE when a patch didnt quite work....now look at this
Profile Card PM + Reply to Post Go to the top of the page
OPaul
Post #10 Aug 4 2004, 20:12


That's what she said
Group Icon

Group: Registered
Posts: 13,345
Joined: 12-August 02
From: Hereford, England Location: Raleigh, NC, US
Member No.: 16,545
Jesus, this is a pretty big bug too.

Posted;
http://forums.mozillazine.org/viewtopic.php?p=699343#699343
Profile Card PM + Reply to Post Go to the top of the page
Kasteo
Post #11 Aug 4 2004, 20:40


สวัสดี
Group Icon

Group: Registered
Posts: 680
Joined: 4-August 03
From: N 38°47.656' W077°3.756'
Member No.: 33,881
I haven't tried Firefox 0.9.3 yet, but it has been fixed in the nightly branch build I'm using since August 03.
Profile Card PM + Reply to Post Go to the top of the page Email Poster
Si
Post #12 Aug 4 2004, 21:00


Neowinian ULTRAKILL
Group Icon
Group Icon

Group: Global Moderator
Posts: 11,349
Joined: 9-April 03
From: UK
Member No.: 25,729
Quote - (Kasteo @ Aug 4 2004, 21:40)
but it has been fixed in the nightly branch build I'm using since August 03.

Yup, it throws up

Quote -
XML Parsing Error: undefined entity
Location: http://www.nd.edu/~jsmith30/xul/test/browser2.xul
Line Number 856, Column 36:              <menuitem accesskey="&releaseCmd.accesskey;"
-----------------------------------^
Profile Card PM + Reply to Post Go to the top of the page
IGAU
Post #13 Aug 4 2004, 21:55


Resident One Post Wonder
Group Icon

Group: Registered
Posts: 1
Joined: 4-August 04
Member No.: 65,110
As far as I'm concerned, I can find no evidence to say that this was supposed to be in 0.9.3 at all... unless you can give a source which directly quotes a developer stating that, please stop spreading rubbish about a "messed up" release. Four security bugs were fixed with 0.9.3, and if you check the thread already linked, you'll see why I don't even consider this an exploit.

Kasteo, I'd be interested to know what build you're using, since I can't think of a fix for this at all, short of forcing the legitimate statusbar to display for XUL content (i.e. prevent popups disabling it), nor can I find any checkins or bugfixes to indicate that any change has been made in relation to this "bug" at all.
Profile Card PM + Reply to Post Go to the top of the page Email Poster
Chad
Post #14 Aug 4 2004, 22:28


Neowinian DOMINATING
Group Icon

Group: Registered
Posts: 9,807
Joined: 8-January 02
Member No.: 8,406
moved to Web Browser Discussion
Profile Card PM + Reply to Post Go to the top of the page
Kasteo
Post #15 Aug 4 2004, 23:02


สวัสดี
Group Icon

Group: Registered
Posts: 680
Joined: 4-August 03
From: N 38°47.656' W077°3.756'
Member No.: 33,881
Quote - (IGAU @ Aug 4 2004, 21:55)
...
Kasteo, I'd be interested to know what build you're using, since I can't think of a fix for this at all, short of forcing the legitimate statusbar to display for XUL content (i.e. prevent popups disabling it), nor can I find any checkins or bugfixes to indicate that any change has been made in relation to this "bug" at all.

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7) Gecko/20040804 Firefox/0.9.1+

When you click on the example of an exploit XUL content link it will show....
CODE
XML Parsing Error: undefined entity
Location: http://www.nd.edu/~jsmith30/xul/test/browser2.xul
Line Number 856, Column 36:              <menuitem accesskey="&releaseCmd.accesskey;"
-----------------------------------^
Profile Card PM + Reply to Post Go to the top of the page Email Poster
« Older · Firefox (Gecko) · Newer »
2 Pages V   [1] 2 ... Next  Reply to this topic