Friday, July 9. 2004
Mozilla isn't immune
The Mozilla code is vulnerable to an attack on how it handles shell: URLs.
It only affects XP and W2K users. Update to:
Mozilla 1.7.1
Firefox 0.9.2
Thunderbird 0.7.2
Security firm Secunia rates the problem as "moderately critical". So it's less serious than still unresolved issues bedevilling IE but still unwelcome to Windows users defecting from IE for security reasons. Secunia notes that multiple exploits in Internet Explorer also utilise "shell:" functionality. "The shell: URI handler is inherently insecure and should only be accessed from a few trusted sites - or not from a browser at all," it says.
It only affects XP and W2K users. Update to:
Mozilla 1.7.1
Firefox 0.9.2
Thunderbird 0.7.2
Trackbacks
Trackback specific URI for this entry
No Trackbacks