Flaw found in Firefox

ApM · 04-07-2005, 12:24 AM

A flaw has been discovered in the popular open-source browser Firefox that potentially could release sensitive information stored in memory, according to a report by security information company Secunia.

While the flaw is only rated as "moderately critical," the rapid adoption of the open-source browser may put a growing number of users at risk. Prior to the release of version 1.0, downloads of earlier versions of the browser had reached 8 million within the first 18 months.

Firefox versions 1.0.1 and 1.0.2 contain the flaw, Secunia said.

The vulnerability stems from an error in the JavaScript engine, according to Secunia. This error can expose arbitrary amounts of heap memory after the end of a JavaScript string. As a result, an exploit may disclose sensitive information in the memory.

Soruce: http://news.com.com/Flaw+found+in+Fi...l?tag=nefd.top

- Note: The Soruce link contains a test to see wether the security hole has affected you.

Lasrix · 04-11-2005, 06:54 PM

i did that test.. i dont get whats with those chars?

P.P. Mguire · 04-27-2005, 02:30 PM

hmm looks like im good then.

harley3344 · 08-18-2005, 08:15 PM

ahahaha it fails with ff and works with ie. shows that everyone should switch to firefox

Greg · 08-18-2005, 11:16 PM

Yeah It just gave me a bunch of X's.

I have 1.0.4 and have the JavaScript engine disabled anyway (it runs too slow for me, I just view the page in IE)

04-07-2005, 12:24 AM	#1 (permalink)
ApM Ultra Techie Join Date: Jan 2005 Posts: 503	Flaw found in Firefox A flaw has been discovered in the popular open-source browser Firefox that potentially could release sensitive information stored in memory, according to a report by security information company Secunia. While the flaw is only rated as "moderately critical," the rapid adoption of the open-source browser may put a growing number of users at risk. Prior to the release of version 1.0, downloads of earlier versions of the browser had reached 8 million within the first 18 months. Firefox versions 1.0.1 and 1.0.2 contain the flaw, Secunia said. The vulnerability stems from an error in the JavaScript engine, according to Secunia. This error can expose arbitrary amounts of heap memory after the end of a JavaScript string. As a result, an exploit may disclose sensitive information in the memory. Soruce: http://news.com.com/Flaw+found+in+Fi...l?tag=nefd.top - Note: The Soruce link contains a test to see wether the security hole has affected you.

04-11-2005, 06:54 PM	#2 (permalink)
Lasrix Super Techie Join Date: Mar 2005 Posts: 364	i did that test.. i dont get whats with those chars? __________________

08-18-2005, 11:16 PM	#5 (permalink)
Greg Indeed. Join Date: Dec 2004 Posts: 1,531	Yeah It just gave me a bunch of X's. I have 1.0.4 and have the JavaScript engine disabled anyway (it runs too slow for me, I just view the page in IE) __________________

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

04-27-2005, 02:30 PM	#3 (permalink)
P.P. Mguire Banned Join Date: Dec 2004 Posts: 4,557	hmm looks like im good then.

08-18-2005, 08:15 PM	#4 (permalink)
harley3344 Super Techie Join Date: May 2005 Posts: 445	ahahaha it fails with ff and works with ie. shows that everyone should switch to firefox