main
Report a problem

Mozilla patches 6 Firefox bugs

Slimy   on 31 May 2007 - 20:50 · 17 comments & 9142 views

Advertisement (Why?)
Mozilla Corporation fixed six vulnerabilities in its Firefox browser, the third time the open-source developer has updated Firefox in 2007. The updates bring the current browser to Version 2.0.0.4, and the 2005 edition to 1.5.0.12. Mozilla also reiterated that today's patches would be Firefox 1.5's last, and said that an update to Firefox 2.0.0.4 would be offered to its users "over the coming weeks."

MFSA 2007-12, the most serious of the six, patched 30 separate memory corruption bugs in the browser layout and JavaScript engines. Even Mozilla seemed unsure of their impact. "Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code," the advisory read. Mozilla warned that Thunderbird and SeaMonkey, which shares Firefox's layout engine, may be vulnerable to these bugs as well and recommended that users do not enable JavaScript in Thunderbird or the mail portion of SeaMonkey.

The update also fixed a pop-up bug that could be used to mask parts of the browser, such as the address bar; a cross-site scripting vulnerability; a problem with how the browsers handle cookies; and a flaw that could let attackers crash Firefox using its autocomplete feature.

Link: Download Links
News source: ComputerWorld

Post a comment · Send to friend Comments · There are 17 additional comments
(8 replies) #1 mkol on 31 May 2007 - 21:08
who said firefox is without flaws....

Firefox is very much open to spyware than IE7. I use them both
#1.1 +acxz on 31 May 2007 - 21:32
Yes, who said it?
#1.2 zivan56 on 31 May 2007 - 21:44
Yes, the only difference is that these ones get patched, while IE bugs deemed small may never be patched. Don't know why you are referring to spyware, as spyware is the least of your problems if a bug is successfully exploited (read root execution privileges in some cases).
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...
#1.3 Shining Arcanine on 31 May 2007 - 21:50
Quote - (zivan56 said @ #1.2)
Yes, the only difference is that these ones get patched, while IE bugs deemed small may never be patched. Don't know why you are referring to spyware, as spyware is the least of your problems if a bug is successfully exploited (read root execution privileges in some cases).
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...


If Firefox had Internet Explorer's marketshare, you would probably be shocked by the number of zero-day exploits performed.
#1.4 GP007 on 31 May 2007 - 22:02
Whoever says their software is perfect or doesn't have flaws is living in a dream world.
#1.5 +Dakkaroth on 31 May 2007 - 22:13
Quote - (mkol said @ #1)
who said firefox is without flaws....

Firefox is very much open to spyware than IE7. I use them both


As far as I can tell, no one did.
#1.6 ThaCrip on 31 May 2007 - 23:11
Quote - (Shining Arcanine said @ #1.3)
Quote - (zivan56 said @ #1.2)
Yes, the only difference is that these ones get patched, while IE bugs deemed small may never be patched. Don't know why you are referring to spyware, as spyware is the least of your problems if a bug is successfully exploited (read root execution privileges in some cases).
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...


If Firefox had Internet Explorer's marketshare, you would probably be shocked by the number of zero-day exploits performed.


i think u BOTH have good points... but if u ask me i think "overall" (as of now) Firefox is a safer to use browser than IE is in general (especially for the average joe) cause it lacks market share so because it's the small guy it's less likely someone will attempt to exploit Firefox over IE.

on a personal note... although IE7 did get noticeably better than IE6 in terms of security etc etc, i just HATE IE7's interface... IE6's was MUCH better ... but it could be one of those things that "you just gotta get used to" sorta thing.

but bottom line for me is i dont think ill be switching from Firefox to IE anytime soon ... cause of firefox's extensions. the main one i like is "tabscroller" (which is basically only extension i have installed) cause with tabscroller you can set it up so when u hold down the right mouse button and use the scroll wheel it will scroll instantly between browser tabs you got open... it took me a while to get used to but once u do it saves time/wear and tear on your wrist switching between tabs since u dont gotta move your hand to switch between tabs by manually clicking on the tab in the tab bar
#1.7 shhac on 31 May 2007 - 23:54
Quote - (ThaCrip said @ #1.6)
i think u BOTH have good points... but if u ask me i think "overall" (as of now) Firefox is a safer to use browser than IE is in general (especially for the average joe) cause it lacks market share so because it's the small guy it's less likely someone will attempt to exploit Firefox over IE.

on a personal note... although IE7 did get noticeably better than IE6 in terms of security etc etc, i just HATE IE7's interface... IE6's was MUCH better ... but it could be one of those things that "you just gotta get used to" sorta thing.

but bottom line for me is i dont think ill be switching from Firefox to IE anytime soon ... cause of firefox's extensions. the main one i like is "tabscroller" (which is basically only extension i have installed) cause with tabscroller you can set it up so when u hold down the right mouse button and use the scroll wheel it will scroll instantly between browser tabs you got open... it took me a while to get used to but once u do it saves time/wear and tear on your wrist switching between tabs since u dont gotta move your hand to switch between tabs by manually clicking on the tab in the tab bar
I agree, the extensions in firefox make it a better browser for me before i even consider saftey. Personally I have fun playing with webpage code using greasemonkey/firebug. Support for this kind of use just doesnt seem to exist in IE.
#1.8 cpu on 01 Jun 2007 - 06:02
Quote - (shhac said @ #1.7)
Personally I have fun playing with webpage code using greasemonkey/firebug. Support for this kind of use just doesnt seem to exist in IE.


You're just wrong about that
http://www.ie7pro.com/ (ok, firebug is partially supported...)

Additionally,
http://www.ieforge.com/InlineSearch/HomePage
(3 replies) #2 soldier1st on 31 May 2007 - 22:10
firefox does not use activex and firefox can be extented and ie can but the ie addons cost and the firefox extensions do not.
#2.1 Fire and Flames on 01 Jun 2007 - 02:12
ie7pro does not cost anything
#2.2 vetmarkjensen on 01 Jun 2007 - 14:16
Quote - (Fire and Flames said @ #2.1)
ie7pro does not cost anything
Let me see...

Oh, drat! I need to buy a Windows license.

Linux user here. Sorry, but Mozilla is free. IE is prepaid with your copy of Windows.
#2.3 RealFduch on 03 Jun 2007 - 01:29
Quote - (markjensen said @ #2.2)
IE is prepaid with your copy of Windows.

If IE is prepaid than tell me how many IE versions are prepaid when you buy Windows version X?

Another question: are Windows Media Player and MSN Messenger prepaid too?
(1 reply) #3 duntkno on 31 May 2007 - 22:10
i guess i am.... its wonderful here....
#3.1 K3vlar on 01 Jun 2007 - 02:38
Quote - (GP007 said @ #1.4)
Whoever says their software is perfect or doesn't have flaws is living in a dream world.

Quote - (duntkno said @ #3)
i guess i am.... its wonderful here....


Makes a little more sense now? I hope that was the intended parent, 'cause if not, i'm still confused.
(1 reply) #4 kljs on 01 Jun 2007 - 14:29
black hats can just peek at firefox code and see where the flaws is...... it's probably more challenging to do it on IE, since you have to find it first....
#4.1 z0phi3l on 02 Jun 2007 - 23:31
Quote - (kljs said @ #4)
black hats can just peek at firefox code and see where the flaws is...... it's probably more challenging to do it on IE, since you have to find it first....



Time isn't an issue either, not like MS will patch a vulnerability until it's found first, and then you have to wait a few months for an actual "fix"

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)