Computing.Net > Forums > Security and Virus > Firefox Vulnerabilities

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Firefox Vulnerabilities

Reply to Message Icon

Name: Wombat
Date: October 20, 2004 at 13:29:11 Pacific
OS: Win XP SP2
CPU/Ram: AMD XP 3000+ / 1024mb
Comment:

Secunia Research has discovered two vulnerabilities in Mozilla, Mozilla Firefox, and Camino, which can be exploited by malicious web sites to obtain sensitive information and spoof dialog boxes.

http://secunia.com/advisories/12712/

Purgamentum initium, exitus purgamentum



Sponsored Link
Ads by Google

Response Number 1
Name: Kevin The Tech Dude
Date: October 20, 2004 at 13:48:44 Pacific
Reply:

This is why I use Internet Explorer :)


LMAO!!!!!

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 2
Name: Wombat
Date: October 20, 2004 at 13:56:59 Pacific
Reply:

Same here Kevin, I never have liked tabbed browsers, I've given them all a go. I'll stick to IE6 it serves me well.

Purgamentum initium, exitus purgamentum


0

Response Number 3
Name: Viking
Date: October 20, 2004 at 14:16:19 Pacific
Reply:

NO ...I insist ... LMFAO <-- :)


Bout time FF was given a real world work out. It should get a baptizism of fire as it rises majestically out of BETA status ;)

Anyone wondering why the delay in 1.0 RC1 release -- that's one of em.

See the iDiOt walk
See the idiot TaLk

WaLk IdIoT WaLk


0

Response Number 4
Name: Jake2
Date: October 20, 2004 at 15:48:37 Pacific
Reply:

IE suffers from the first vulnerability, except not with tabs. I could link to a secure page just like they did for the Firefox proof-of-concept, but have it open in a new window because IE people use windows like Firefox people use tabs, then do the Javascript popup thing.

The second one would be worth more attention if the text went into forms on both pages. Don't you think most people would notice when the text they're typing doesn't echo and other form elements don't work at all?

IE, however, has numerous real vulnerabilities, and clicking links rather than typing URLs to secure sites is far more dangerous in IE than Mozilla.

I think Mozilla will always be more secure than IE simply because it isn't integrated into the OS, thus exploits tend to do significantly less damage.


0

Response Number 5
Name: Viking
Date: October 20, 2004 at 16:02:49 Pacific
Reply:

nowt like bait :)


See the iDiOt walk
See the idiot TaLk

WaLk IdIoT WaLk


0

Related Posts

See More



Response Number 6
Name: Kevin The Tech Dude
Date: October 20, 2004 at 16:12:09 Pacific
Reply:

Hook, Line and sinker....

I knew a firefox love would jump in sooner or later. Why do you think I placed my... LMAO at the end of the post.

Takes awhile sometimes but the fish almost always bite.

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 7
Name: Wombat
Date: October 20, 2004 at 18:00:47 Pacific
Reply:

And just to show I'm not picking on Firefox, here's the link for Opera users...

http://secunia.com/advisories/12713/

And one for Netscrape 7x...

http://secunia.com/advisories/12714/

Purgamentum initium, exitus purgamentum


0

Response Number 8
Name: Viking
Date: October 20, 2004 at 18:31:45 Pacific
Reply:

Come on Wombat ...show the disgrace list for IE too.

By tomorrow, I expect at least a 45 sided, A4 essay paper filled, document. With ALL IE TechNet security beefytin "I's" and "T's", crossed and trubplicated.

At least offer the undecided the promise of untampered dwarf porn and heavenly "burdened" virgins -- malware free, somewhere along this dodgy Internet highway.


Jeeez.


See the iDiOt walk
See the idiot TaLk

WaLk IdIoT WaLk


0

Response Number 9
Name: dw226
Date: October 20, 2004 at 18:43:28 Pacific
Reply:

Lol, here we go! I love Firefox, but I quite honestly have been waitng for this to happen. I also have high doubts these are the only issues too. But now Kevin, before you go jumping out of your seat with glee, you have to admit that IE has FAR more troubles.

This is off-topic, but I saw at PCWorld today where a flaw was in Windows that allowed people to put programs on your computer and screw you through the copy and paste function----even with SP2 and a fully patched system.

Man, I tell ya, no matter how much you patch, use security programs, or whatever, somebody still always manages to find a freaking hole in Windows. You can switch to a different OS, but Linux has taken hits and it seems that people are starting to have a field day with Macs now.

I say we all switch to MSNTV units (don't throw things, it was a joke). Lol, sadly I've been there, hated it, but admittedly never had a virus, a hacked computer, or any other crap I've had to put up with a computer.


0

Response Number 10
Name: Kevin The Tech Dude
Date: October 20, 2004 at 18:56:07 Pacific
Reply:

dw226,

Yes, IE has more known flaws because it is the most popular, we know this as fact. When another browser becomes the defacto it will then have the most flaws.

Yes we can all patch have anti-virus, anti-trojan and both hardware and software firewalls and you can run any OS in this world and there are a lot of OS'es out there. To many to even count and none of them are 100% secure.

Yes, I will admit that at the current time if you are using Firefox over IE you are less at risk but I have been using IE since 1996 and have never had a problem but then again I have been a computer professional since 1989.

I also have to note, what I do for myself I do not always do for my clients. A lot of my clients are not running SP2 and will not be for a long time. I just make sure the systems are secure in other ways.

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 11
Name: helix
Date: October 20, 2004 at 20:10:04 Pacific
Reply:

this is what the Ie lovers would say when the Ie was and is still being ripped apart from the underground.Its because Ff is more popular now thats why it has vulnerabilities..Ie is like golf,which one has more holes.FORDDDDDDDDDD!!!!!LOL!!!!!LMAO


0

Response Number 12
Name: Wombat
Date: October 20, 2004 at 20:24:09 Pacific
Reply:

Helix... well done!

Purgamentum initium, exitus purgamentum


0

Response Number 13
Name: Kevin The Tech Dude
Date: October 20, 2004 at 20:24:18 Pacific
Reply:

Helix,

What kind of responce was that? Firefox is far from the most popular browser at the moment and it will be sometime if it ever overtakes IE.

It was painful to read your responce is all I have to add.

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 14
Name: helix
Date: October 20, 2004 at 20:51:41 Pacific
Reply:

i just had a couple of beers.burrrrpppp!!! and i felt the urge.Ie is like a drunk,one to many.LOL!!!LMAO!!!

here is a couple of juicy ones for the ie security experts.

http://news.com.com/Why+I+dumped+Internet+Explorer/2010-1032_3-5391063.html

http://slate.msn.com/id/2103152/

http://www.washingtonpost.com/wp-dyn/articles/A6746-2004Jun25.html

http://www.oreillynet.com/pub/wlg/5199

http://reviews.cnet.com/4520-3513_7-5515107-1.html

ive got more juicy ones if ya need them.LOL!!!!!!and you guys like ie.LOL!!!!!!!!



0

Response Number 15
Name: Kevin The Tech Dude
Date: October 20, 2004 at 20:59:57 Pacific
Reply:

Not even worth a responce. Oh wait, this is one but sorry. I shall not comment no more.

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 16
Name: Jake2
Date: October 20, 2004 at 21:07:44 Pacific
Reply:

"When another browser becomes the defacto it will then have the most flaws."

Only if that browser is integrated into the shell and has stupid, insecure features like ActiveX. Apache is more secure than IIS despite being more popular.

"I have been using IE since 1996 and have never had a problem but then again I have been a computer professional since 1989."

So you know what sites to avoid and what not to download. You wouldn't have problems then. The people that need Firefox for security don't know any better. People like me use Firefox for the features, and not just tabbed browsing and popup blocking, but mouse gestures, adblock, etc.

Do you guys like solving people's hijacking problems? Is that why you're trying to scare them away from secure browsers?


0

Response Number 17
Name: helix
Date: October 20, 2004 at 21:27:55 Pacific
Reply:

good point Jake.Most people that come here are all ie users,but you barely hear of any security experts respond with excellent info by changing browsers that have less spyware and all of the rest of the ie goodies.I usally go to the target range and ie reminds me of how many times the Ie exploits hit the bullseye.i would be one sharp shooter.LMAO!!!LOL!!


0

Response Number 18
Name: Kevin The Tech Dude
Date: October 20, 2004 at 21:51:55 Pacific
Reply:

Ok, I said I would not respond but I was called out so I have too.

Jake,

As much as I want to respond to you I cannot. To much of a legal risk on my part. IE is a good browser. Just remember this. A computer is only as smart as the person sitting infront of it.

KTTD


Wanker Drivers.Com Just Go There


0

Response Number 19
Name: Glitchman
Date: October 25, 2004 at 00:03:33 Pacific
Reply:

When another browser becomes the defacto it will then have the most flaws.

This is not necessarily true. In the world of web servers, Apache dominates, while Micro$oft IIS has nowhere near its presence. Guess which one has more vulnerabilities and is defaced or hacked more often. :) Food for thought.


0

Response Number 20
Name: Wimthepimscake
Date: November 10, 2004 at 01:55:24 Pacific
Reply:

Glitchman,
go and read this...

http://weblogs.asp.net/michael_howard/archive/2004/10/15/242966.aspx

I a computerprogrammer and I support this statement: "When another browser becomes the defacto it will then have the most flaws." That is because then there is a reason to look for them.

To Jake the following comment:

"insecure features like ActiveX", there is nothing insecure with activeX, it all depends on how you use it. And it actually is on of the best ways to build a high security web application.

Let's all stick to IE, in that way we have the best compatibility.

Wim


0

Response Number 21
Name: Glitchman
Date: November 14, 2004 at 18:34:24 Pacific
Reply:

While there may have been more vulnerabilities found in Apache 2.x, they have certainly done a better job of patching them, as opposed to IIS.

I would be more interested in seeing figures of how often each type of site has been defaced or compromised. Every now and then, I come across a defaced site as I'm randomly surfing the web. When I find one that is obviously defaced, I make sure to fire up good ol' Lynx and see what type of server they are using with the = key. In all cases so far, they have been IIS servers. I am sure everyone would like to see a more scientific study of this.

I also can program (in ten languages, actually) and know that no software can ever be perfect. From experience, the holes in MS's software tend to be more critical. I can point out several sites that will immediately infect IE (even with latest patches), but it might be against the policies here. As for "sticking with IE", no thanks. Version 4.0 forever opened my eyes and I'll never use IE, even if my life depended on it.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Monitoring & Surveill... Info on Log-on and BLAZEF...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Firefox Vulnerabilities

Hackers turn to Mozilla www.computing.net/answers/security/hackers-turn-to-mozilla/15431.html

Firefox updates www.computing.net/answers/security/firefox-updates/20455.html

Firefox popup allows snooping www.computing.net/answers/security/firefox-popup-allows-snooping/20351.html