Mozilla's Firefox browser is susceptible to a buffer
overflow attack that is deemed 'highly critical', users have been warned.
The flaw was discovered by security expert Tom Ferris and affects all
versions of the open source browser up to 1.0.6, as well as the
beta for
Firefox 1.5, he
reported on his
website.
The vulnerability allows an attacker to remotely execute code on a
compromised system through a
buffer
overflow attack.
Demonstrating the vulnerability, Ferris offers a link to a page where a
specially crafted URL will cause the browser to freeze and eventually crash,
closing all browser windows. Microsoft's Internet Explorer is unaffected by the
flaw.
Ferris reported the issue to Mozilla on 4 September, but allegedly decided to
go public after a disagreement with the organisation.
Firefox uses its record on security as a principal selling point in enticing
users to switch from Internet Explorer. But although Microsoft's browser has
been hit with a series of vulnerabilities, Firefox has also had its
share of problems recently.
EDM Administrator - London - £22,300 to £24,200pa The Crown Estate is a unique organisation that manages a vast and varied property portfolio, comprising commercial, agricultural and marine interests throughout Britain. We are looking for an ... more >
ICT Project Officer - Guildhall, London EC2 18-month fixed-term contract Bring your project management expertise to one of the country's most prestigious institutions. The City of London is the local authority for the Square Mile, ... more >
Technical Hosting Engineer Location - Reading Job Description: This is an applications infrastructure and engineering role within the team. This role is primarily focussed on developing and evolving a quarantine application hosting service. The quarantine ... more >
Central London, United Kingdom | MI5 Security Service
Communications Centre Engineer - Competitive salaries + excellent benefits - Central London Getting the best out of technology is critical to helping us protect the UK. Join MI5 and use your skills and experience to ... more >More job opportunities
Print
Discuss
Send to friend
RSS feeds
Holes could allow hackers to implant Trojan or key-logger 09 May 2005
del.icio.us
Digg this
reddit!
