Firefox 3 security flaw identified
19.06.2008
IDENTITY THEFT and IDENTITY FRAUD News and views - This daily news service searches the web to bring you relevant news to your desktop
Less than one day after its launch, Firefox 3 has a vulnerability. According to Tipping Point's Zero Day Initiative, the vulnerability, which it rates as critical, was reported within the first five hours of Firefox 3's release. "Once the vulnerability was verified in TippingPoint's DVLabs and acquired from the researcher, the vulnerability was promptly reported to the Mozilla security team," said a representative. Although the Zero Day Initiative team does not offer specifics until the vendor has a chance to patch it, the blog post did say this vulnerability, which also affects Firefox 2, requires user interaction and could result in an attacker executing arbitrary code. Mozilla is reported to be working on a fix. ID Theft Protect has also found that several "add ons" are not supported. We currently run AVG Anti-Virus Free Edition 8.0 and attempted to use the 'Security toolbars' and 'Safe Search' add ons - but these are currently not supported. Additionally we noted that Comodo's Verification Engine is also not supported. These are all useful security tools which I'm sure will be fixed in due course. Some suggest users wait - but we love Firefox 3 so much we suggest people use it. Anyway if you don't use it how do you expect to find out what doesn't work and whether there are any security issues? Source: cnet.com Search Related News: firefox, mozilla, browser, internet ARE YOU AT RISK OF IDENTITY THEFT? FIND OUT NOW! |