Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

More Security Flaws in Firefox Than IE This Year
Mozilla Zine ^ | Saturday July 30th, 2005

Posted on 08/01/2005 6:19:16 PM PDT by Asphalt

"Computer Weekly is reporting that Firefox has had more flaws found in it this year than Internet Explorer."

The report in the UK-based IT trade publication states: "There have now been more flaws in the Firefox browser this year than in Microsoft's Internet Explorer." It does not give a source for this statistic but it may be relying on data from a security advisory service such as Secunia. The 2005 Secunia vulnerability report for Firefox 1.x states that there have been seventeen security flaws in Firefox this year, while the 2005 Secunia vulnerability report for Internet Explorer 6.x

includes only nine advisories. There are more unpatched IE vulnerabilites though, and it should be noted that not all security flaws are equally severe.

This is not the first time that more security vulnerabilities have been reported in Mozilla products than in Internet Explorer. In March, Symantec published its Internet Security Threat Report Volume VII (you have to supply your personal details to Symantec to download it), covering the second half of 2004. The report said: "The discovery of vulnerabilities affecting browsers appears to be on the rise, with more Mozilla vulnerabilities documented in this period than those affecting Microsoft Internet Explorer... Between July 1 and Dec. 31, 2004, Symantec documented 13 vulnerabilities affecting Microsoft Internet Explorer. This is notably lower than the 21 vulnerabilities affecting each of the Mozilla browsers that were documented during the same period. Six vulnerabilities were reported in Opera and none in Safari." (This excerpt is included on page 3 of April's Langa Letter: The Pros And Cons Of Firefox.)


TOPICS: Miscellaneous; Technical
KEYWORDS: gatesbot; paidshill; shillboy2000; valenticabanaboy
Navigation: use the links below to view more comments.
first 1-2021-4041-48 next last

1 posted on 08/01/2005 6:19:17 PM PDT by Asphalt
[ Post Reply | Private Reply | View Replies]

To: Asphalt

Faithful Firefox user here. I just cleaned two viruses off my notebook last weekend which were identified as MSIE vulnerabilities. I only use that browser for my e-mail and am now considering changing that.

But no matter what browser you use, you need current anti-virus software.


2 posted on 08/01/2005 6:22:01 PM PDT by Colonel_Flagg (Skol Vikings.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Asphalt

I like and use both Firefox and IE. Vulnerabilites happen. As long as they get fixed, I'm happy.


3 posted on 08/01/2005 6:22:34 PM PDT by Doohickey (If you choose not to decide, you will have made a choice...I will choose freewill.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Asphalt

I like that name..."Secunia"....sounds exotic.


4 posted on 08/01/2005 6:24:36 PM PDT by Dallas59 (" I have a great team that is going to beat George W. Bush" John Kerry -2004)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Doohickey

In fact, I'm using IE now while I install the newest Firefox (been out of town for the past few days).


5 posted on 08/01/2005 6:24:55 PM PDT by Doohickey (If you choose not to decide, you will have made a choice...I will choose freewill.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Asphalt
It is not just the number of vulnerabilities but also the possible consequences of the vulnerability that is the heart of the issue. A higher number of IE vulnerabilities have severe potential consequences related to those of Firefox, at least to date.

I would rather have nine birds land on me than one elephant....
6 posted on 08/01/2005 6:32:37 PM PDT by georgiarat
[ Post Reply | Private Reply | To 1 | View Replies]

To: Asphalt
Does anybody know if Firefox can pass the Acid2 test?

IE v7 can't. Microsloth admits it. Brand shiny new version, too. What a shame! Largest software behemoth in the world and they can't design a simple browser.

7 posted on 08/01/2005 6:37:35 PM PDT by upchuck ("If our nation be destroyed, it would be from the judiciary." ~ Thomas Jefferson)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Colonel_Flagg
But no matter what browser you use, you need current anti-virus software.

No matter what browser you use, you will get a virus if your configuration is not correctly set up.

I do not use an anti-virus software, and I use IE6 with Windows XP. And I don't ever get a virus or spyware.

8 posted on 08/01/2005 6:40:59 PM PDT by blueberry12
[ Post Reply | Private Reply | To 2 | View Replies]

To: upchuck

Come to think of it, if Micro$oft stumbles, mumbles and falls trying to design a silly browser, I sure hope they don't think they could design, say, an operating system with built in GUI. That's gotta be at least a little more complicated than a browser.


9 posted on 08/01/2005 6:41:57 PM PDT by upchuck ("If our nation be destroyed, it would be from the judiciary." ~ Thomas Jefferson)
[ Post Reply | Private Reply | To 7 | View Replies]

To: blueberry12

Yet.


10 posted on 08/01/2005 6:42:58 PM PDT by upchuck ("If our nation be destroyed, it would be from the judiciary." ~ Thomas Jefferson)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Asphalt

I dunno, updated a week or two ago to the latest version of Firefox, and the performance seems notably worse. More crashing(rarely did before), sometimes slower, and much slower in loading graphic intensive pages (has an annoying hangup when scrolling down a page of pictures.) And of course every version has completely stunk when loading certain java pages (like the Nat'l Weather Service radars.)


11 posted on 08/01/2005 6:45:01 PM PDT by Diddle E. Squat (E-Hominy.com is corny)
[ Post Reply | Private Reply | To 1 | View Replies]

To: upchuck

No.

Never. No virus can get inside my computer.
I guarantee you that.


12 posted on 08/01/2005 6:45:55 PM PDT by blueberry12
[ Post Reply | Private Reply | To 10 | View Replies]

To: upchuck

ActiveX is disabled on my computer. NetBIOS is disabled. I have protocol filtering. WinXP firewall enabled. I have a bunch of ports disabled. If you look, you can't even find me on the network. I am invisible.


13 posted on 08/01/2005 6:47:51 PM PDT by blueberry12
[ Post Reply | Private Reply | To 10 | View Replies]

To: Asphalt

With open source software such as FireFox, bugs and security vulnerabilities are reported and fixed quickly.

With proprietary Microsoft software such as Internet Explorer, which is more integrated with the Windows operating system rather than a modular layer on top of it, bugs and security vulnerabilities may not be acknowledged or fixed in a timely manner.

14 posted on 08/01/2005 6:52:07 PM PDT by FraudFactor.com (Support redistricting reform to end gerrymandering and achieve more honest and responsive government)
[ Post Reply | Private Reply | To 1 | View Replies]

To: upchuck

IE 6 has been a good overall browser. We use it extensively in enterprise applications. Firefox is small simple and relatively secure and that is its flaw when used as anything but a web-site browser.

I use Firefox at home regularly, but it has its place.

IE is very versatile and while that makes it difficult to secure it also make it very useful.

MS has its troubles (mostly due to the self imposed catch 22), but they have built two very nice operating systems (W2K & XP Pro) and I expect Vista to be even better.


15 posted on 08/01/2005 6:55:01 PM PDT by CyberCowboy777 (You may remember me from such threads as "Christmas in Cambodia" & "Crying Game: The Gore Story")
[ Post Reply | Private Reply | To 7 | View Replies]

To: blueberry12

If you really want to screw over the punk hackers then run WIN98SE and Mozilla 1.7 with SpyBot S&D and AdWare, they are too busy trying to break into XP and Internet Destroyer to look for the old stuff.

Critter free for 2 years+


16 posted on 08/01/2005 6:56:21 PM PDT by ChefKeith (If Diplomacy worked, then we would be sitting here talking.)
[ Post Reply | Private Reply | To 13 | View Replies]

To: FraudFactor.com
You forgot to mention the overall complexity of the software and the support maintenance at the enterprise level.

Neither are part of the Firefox picture, making it much easier to respond to.
17 posted on 08/01/2005 6:57:47 PM PDT by CyberCowboy777 (You may remember me from such threads as "Christmas in Cambodia" & "Crying Game: The Gore Story")
[ Post Reply | Private Reply | To 14 | View Replies]

To: ChefKeith
W98 SE, W2K, XP Pro - not a virus in sight.

Most ad-ware and viruses are self inflected, I've cleaned more than my share (why did you download that?)

Certainly viruses can migrate across networks and other vulnerabilities and exploits can be used, but users are their own worse enemy.

I propose a license to surf the web.

You want to go online? Papers Please.
18 posted on 08/01/2005 7:01:44 PM PDT by CyberCowboy777 (You may remember me from such threads as "Christmas in Cambodia" & "Crying Game: The Gore Story")
[ Post Reply | Private Reply | To 16 | View Replies]

To: ChefKeith

I would use Win98... But I already used WinXP for over a year, and I love it. I can't go back now. And actually I have no reason to go back.


19 posted on 08/01/2005 7:02:48 PM PDT by blueberry12
[ Post Reply | Private Reply | To 16 | View Replies]

To: CyberCowboy777
Certainly viruses can migrate across networks and other vulnerabilities and exploits can be used, but users are their own worse enemy.

That's very true. :-D

20 posted on 08/01/2005 7:04:40 PM PDT by blueberry12
[ Post Reply | Private Reply | To 18 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-48 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson