Firefox and 10 million open to exploit

SuperMAG · 2008-06-20 06:05:25

http://blogs.zdnet.com/security/?p=1288

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code, permitting the attacker to completely take over the vulnerable process, potentially allowing the machine running the process to be completely controlled by the attacker. TippingPoint researchers continue to see these types of “user-interaction required ” browser-based vulnerabilities - such as clicking on a link in email or inadvertently visiting a malicious web page.

This is Terrible.

Felix · 2008-06-20 07:17:54

So what?

There are always Security Holes... And there will always be security holes

Internet Explorers first version was released in 1995, 13 years ago, today it is called IE8 and they are still having serious problems with their software.
So I don't see anything unsual about this bug. Such bugs aren't that uncommon, just because of the FF3 release and their "world record" it is being pushed now.

elbekko · 2008-06-20 07:21:41

It isn't terrible, it's good. I bet a fix will be released within a day, perhaps two, thus showing that the Mozilla team actually cares (unlike the majority of other browsers).

SuperMAG · 2008-06-20 07:39:05

i am not worried that they will update it in days or two, what happens if were attacked now

i like firefox very much.

Felix · 2008-06-20 07:41:35

Just don't click every link you get see.
That's it.
Check the targets.
Dont get fooled by JavaScript changes of the status bar.
etc.

elbekko · 2008-06-20 07:43:31

Do what you should always do: browse safely.

SuperMAG · 2008-06-20 07:45:03

yea well i got a strong antivirus and spyware too so no much worries

Last edited by SuperMAG (2008-06-20 07:45:37)

Felix · 2008-06-20 07:54:51

Neither of them will protect you before injected code.
Tho they will help you as soon as the injected code gets active and starting to work

demetris · 2008-06-20 07:57:38

Felix wrote:

[...] Dont get fooled by JavaScript changes of the status bar. etc.

In a default Firefox installation scripts are not allowed to change the status bar: :-)

BTW, Firefox 2.x is also affected by this issue. So, practically, all Firefox installations are affected, not only 10 million.

liquidat0r · 2008-06-20 09:04:31

SuperMAG wrote:

what happens if (I) were attacked now

Well, I won't give up hope just yet. Who knows, it might happen.

sirena · 2008-06-20 19:15:22

elbekko wrote:

It isn't terrible, it's good. I bet a fix will be released within a day, perhaps two, thus showing that the Mozilla team actually cares (unlike the majority of other browsers).

What a dumb comment. Security flaws and sloppy insecure coding are good just because the buggy code in question comes out of Mozilla.org? I don't think so.

The Mozilla track record is not exceptional in terms of responsively patching security flaws, BTW. MS is good too, and the Opera team is even better. Apple is of course the least responsive of the bunch.

elbekko · 2008-06-20 19:31:12

And that just shows what an idiot you are

*Every* piece of software ever written will have flaws, the larger the more flaws. The fact that they're actively being found IS A GOOD THING.

Reines · 2008-06-20 19:54:33

Kinda odd that they reported it right at the release rather than while it was in beta or RC.

Utchin · 2008-06-20 19:59:19

SuperMAG wrote:

yea well i got a strong antivirus and spyware too so no much worries

To be honest you don't even need antivirus if your sensible... You can go years without getting viruses by playing it safe.

Connor · 2008-06-20 20:05:06

Utchin wrote:

SuperMAG wrote:
yea well i got a strong antivirus and spyware too so no much worries
To be honest you don't even need antivirus if your sensible... You can go years without getting viruses by playing it safe.

Are you saying SuperMAG is sensible?

Felix · 2008-06-20 20:37:43

Reines wrote:

Kinda odd that they reported it right at the release rather than while it was in beta or RC.

Well, it happened on purpose.
Bugs or security holes during a beta or RC are common and will be fixed.

But that shortly after a final release it will be quite a big rumour... Like you can "enjoy" it now.

orlandu63 · 2008-06-21 01:59:16

That's why Opera > *

SuperMAG · 2008-06-21 03:00:00

no i installed them for FUN ,, HAHAHAHAHAH

you guys crack me some times.

h2o · 2008-06-21 14:22:27

SuperMAG wrote:

i am not worried that they will update it in days or two, what happens if were attacked now
i like firefox very much.

I think this sort of thing is just something we have to live with. If you r that worried about it the best thing to do would be to disconnect from the net (or not visit "those" sites).

Last edited by h2o (2008-06-21 14:25:14)

SuperMAG · 2008-06-22 04:24:39

i am not that worried, i just dont want to format my comp again,

i am not worried at all now so guys stop bumping

Hemen · 2008-06-22 11:15:55

Good news. Now the FireFox team has problems, i hope people stop using Firefox
Just kidding

Forums

#1 2008-06-20 06:05:25

Firefox and 10 million open to exploit

#2 2008-06-20 07:17:54

Re: Firefox and 10 million open to exploit

#3 2008-06-20 07:21:41

Re: Firefox and 10 million open to exploit

#4 2008-06-20 07:39:05

Re: Firefox and 10 million open to exploit

#5 2008-06-20 07:41:35

Re: Firefox and 10 million open to exploit

#6 2008-06-20 07:43:31

Re: Firefox and 10 million open to exploit

#7 2008-06-20 07:45:03

Re: Firefox and 10 million open to exploit

#8 2008-06-20 07:54:51

Re: Firefox and 10 million open to exploit

#9 2008-06-20 07:57:38

Re: Firefox and 10 million open to exploit

#10 2008-06-20 09:04:31

Re: Firefox and 10 million open to exploit

#11 2008-06-20 19:15:22

Re: Firefox and 10 million open to exploit

#12 2008-06-20 19:31:12

Re: Firefox and 10 million open to exploit

#13 2008-06-20 19:54:33

Re: Firefox and 10 million open to exploit

#14 2008-06-20 19:59:19

Re: Firefox and 10 million open to exploit

#15 2008-06-20 20:05:06

Re: Firefox and 10 million open to exploit

#16 2008-06-20 20:37:43

Re: Firefox and 10 million open to exploit

#17 2008-06-21 01:59:16

Re: Firefox and 10 million open to exploit

#18 2008-06-21 03:00:00

Re: Firefox and 10 million open to exploit

#19 2008-06-21 14:22:27

Re: Firefox and 10 million open to exploit

#20 2008-06-22 04:24:39

Re: Firefox and 10 million open to exploit

#21 2008-06-22 11:15:55

Re: Firefox and 10 million open to exploit

Board footer