Posted on 02/25/2005 3:28:23 AM PST by r5boston
The Mozilla Foundation on Thursday released an update to the Firefox Web browser to fix several vulnerabilities, including one that would allow domain spoofing.
The open-source project released Firefox 1.0.1 to fix a vulnerability in the Internationalized Domain Names (IDN), a standard for handling special character sets in domain names that could let an attacker spoof Web sites on non-Microsoft browsers. The standard allows companies to register domain names that appear to be the same in different languages.
(Excerpt) Read more at news.com.com ...
Nice. I just happend to upgrade tonight to 1.0.1 after noticing I was still using 1.0PR.
(Denny Crane: "There are two places to find the truth. First God and then Fox News.")
bttt
Once again Firefox proves the "I.E. is King" crowd wrong. That's what? two weeks after the bugs are found before they are patched versus MS's 9 months. Marking this topic for later reference for the I.E. supporting folks.
Oddly, IE wasn't vulnerable to this particular malady, simply because they didn't update to the IDN standard, like everybody else. Although you could use a plug-in to get IDN functionality in IE (and be vulnerable like everybody else). The problem is in the standard, not the browsers.
Is there a patch download or do I have to get the whole thing again?
BTTT
Whole thing.
I've got to hand it to the slimes advertising over at Drudge - they are occasionally able to get popups through my FF browser when I go over there. It doesn't happen every time, but it's always associated with Drudge. Is anyone else having the same problem?
Yes, they occassionally slip through on mine as well.
Security problems so soon?
I'll pull down the patch tonight. Maybe it will fix the problem with Firefox not being able to find it's backside with both hands.
Semper Fi
"We'll have that patch in just a moment. But first, let's hear from the Microsoft Fluff Girls with their #1 hit, "Bwaa ha ha." It's a song that will take you back to grammar school days, when playground taunts were considered high humor. "The Fluff Girls have been down on their luck lately; they haven't had a hit since "SCO is going to win," where it was discovered they were lip-syncing. But now they're back, with their famous puerile chants. Here now... the Microsoft Fluff Girls." |
If you wait a few days, there will be a patch available that can be installed via FireFox's auto-update feature.
http://weblogs.mozillazine.org/asa/archives/007609.html
Besides, with a download manager for fast downloading, I had my update in less than 15 minutes.. ( 56K modem )
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.