| Firefox patches security gaps |
Sep. 22, 2005
 As promised, the Mozilla project Wednesday released the latest version of its Firefox Web browser, 1.0.7, which fixes several security problems, including a brand-new one. In addition to fixing the original buffer overflow security hole, a shell script problem popped up -- one that could have caused serious problems for Linux and Unix users, eWEEK.com's Steven J. Vaughan-Nichols reports.
"The shell program used to launch Firefox can also process shell commands," Vaughan-Nichols writes. "So, if Firefox is called by a trick URL, which contains commands, those commands, as well as Firefox, will run. In practice, this flaw could be exploited by tricking users into clicking on a poisoned link in an e-mail message. Then, when the e-mail client calls Firefox to display the link, the commands would also run."
Before you download the new version, read the rest of Vaughan-Nichols's article here.
Related Stories:
(Click here for further information)
|
|
|
|
|
|
|
|
