Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.

Firefox version 2.0.0.5 also fixes a number of memory corruption and privilege escalation flaws, as explained in Mozilla's release notes.

FULL STORY

Thanks for the head-up. IMO the simple workaround is don't launch FF from IE7 :-)

i_Xp/VistaUser

Yes, I can see the advantage of launching IE from FF - incompatible pages etc. - but not the other way around.

"I've always been mad, I know I've been mad, like the most of us..."

XpUser and johnr, my original post in this thread is actually a follow-up to a post I made July 10 in the XP forum.

The launching of Firefox is due to a serious vulnerability that causes Internet Explorer to launch Firefox and execute a malicious payload; not a voluntary launch of Firefox by the user.

The vulnerability allows an attacker to remotely execute malicious code on a machine that is running IE but also has Firefox installed. By luring an IE user to a malevolently crafted site, the attacker can cause Firefox to execute the code without first vetting it for security.

Below is a link to the original story.

IronMan

LINK

Report Offensive Follow Up For Removal