Mozilla Corporation fixed six vulnerabilities in its Firefox browser, the third time the open-source developer has updated Firefox in 2007. The updates bring the current browser to Version 2.0.0.4, and the 2005 edition to 1.5.0.12. Mozilla also reiterated that today's patches would be Firefox 1.5's last, and said that an update to Firefox 2.0.0.4 would be offered to its users "over the coming weeks."
MFSA 2007-12, the most serious of the six, patched 30 separate memory corruption bugs in the browser layout and JavaScript engines. Even Mozilla seemed unsure of their impact. "Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code," the advisory read. Mozilla warned that Thunderbird and SeaMonkey, which shares Firefox's layout engine, may be vulnerable to these bugs as well and recommended that users do not enable JavaScript in Thunderbird or the mail portion of SeaMonkey.
The update also fixed a pop-up bug that could be used to mask parts of the browser, such as the address bar; a cross-site scripting vulnerability; a problem with how the browsers handle cookies; and a flaw that could let attackers crash Firefox using its autocomplete feature.
Link: Download Links
News source: ComputerWorld
MFSA 2007-12, the most serious of the six, patched 30 separate memory corruption bugs in the browser layout and JavaScript engines. Even Mozilla seemed unsure of their impact. "Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code," the advisory read. Mozilla warned that Thunderbird and SeaMonkey, which shares Firefox's layout engine, may be vulnerable to these bugs as well and recommended that users do not enable JavaScript in Thunderbird or the mail portion of SeaMonkey.
The update also fixed a pop-up bug that could be used to mask parts of the browser, such as the address bar; a cross-site scripting vulnerability; a problem with how the browsers handle cookies; and a flaw that could let attackers crash Firefox using its autocomplete feature.
















Firefox is very much open to spyware than IE7. I use them both
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...
If Firefox had Internet Explorer's marketshare, you would probably be shocked by the number of zero-day exploits performed.
Firefox is very much open to spyware than IE7. I use them both
As far as I can tell, no one did.
Both are made by programmers, and both will have bugs...its just how they deal with them that is important. If Microsoft released the IE source code, you would probably be shocked by the amount of exploits found...
If Firefox had Internet Explorer's marketshare, you would probably be shocked by the number of zero-day exploits performed.
i think u BOTH have good points... but if u ask me i think "overall" (as of now) Firefox is a safer to use browser than IE is in general (especially for the average joe) cause it lacks market share so because it's the small guy it's less likely someone will attempt to exploit Firefox over IE.
on a personal note... although IE7 did get noticeably better than IE6 in terms of security etc etc, i just HATE IE7's interface... IE6's was MUCH better ... but it could be one of those things that "you just gotta get used to" sorta thing.
but bottom line for me is i dont think ill be switching from Firefox to IE anytime soon
on a personal note... although IE7 did get noticeably better than IE6 in terms of security etc etc, i just HATE IE7's interface... IE6's was MUCH better ... but it could be one of those things that "you just gotta get used to" sorta thing.
but bottom line for me is i dont think ill be switching from Firefox to IE anytime soon
You're just wrong about that
http://www.ie7pro.com/ (ok, firebug is partially supported...)
Additionally,
http://www.ieforge.com/InlineSearch/HomePage
Oh, drat! I need to buy a Windows license.
Linux user here. Sorry, but Mozilla is free. IE is prepaid with your copy of Windows.
If IE is prepaid than tell me how many IE versions are prepaid when you buy Windows version X?
Another question: are Windows Media Player and MSN Messenger prepaid too?
Makes a little more sense now? I hope that was the intended parent, 'cause if not, i'm still confused.
Time isn't an issue either, not like MS will patch a vulnerability until it's found first, and then you have to wait a few months for an actual "fix"
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.