The Channel logo

News

By | John Leyden 6th April 2005 16:28

Browser bugs sprout eternal

Fresh vulns for Firefox and IE

Mozilla has patched a vulnerability in its popular Firefox web browser that could allow hackers to snaffle information from the PCs of surfers. The JavaScript-related security bug, which affected versions 1.0.1 and 1.0.2 of Firefox, created a means for hackers to seize potentially sensitive information in memory.

Exploitation of the flaw, discovered by Russian bug hunter Azafran, would be far from trivial. Nonetheless security firm Secunia describes the heap buffer overflow bug as "moderately critical". It has put together a test allowing users to check whether they are exposed to the problem. Secunia advised users to disable JavaScript support as a precaution. According to a posting on Bugzilla, Mozilla has fixed the flaw. Security conscious surfers are advised to download this update.

A potentially far more serious unpatched security vulnerability affects unspecified versions of Microsoft’s Internet Explorer and Outlook software. The vulnerability "allows malicious code to be executed with minimal user interaction", warns security outfit eEye, which recently reported the bug to Microsoft.

A spokeswoman for Microsoft said it was investigating eEye's report.

"At this time, Microsoft is not aware of any malicious attacks attempting to exploit the reported vulnerabilities, and there is no customer impact based on this issue. Upon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a fix through a service pack, our monthly release process or an out-of-cycle security update, depending on customer needs," she said. ®

Related stories

Drive-by Trojans exploit browser flaws
Firefox dusted down with security upgrade
Exploit code attacks unpatched IE bug

alert Send corrections

Opinion

Merlin Data Center Interior

Trevor Pott

Enterprises want them, but they're still a pain in the ASCII
WWI French tank picture via Shutterstock
Vinod_Khosla

Chris Mellor

A VC with startup agenda slams established suppliers. Surprised? Neither were we
ZenPad_RealRacing

Features

Eclipse image via Shutterstock
The Azure Portal: Microsoft is betting on cloud for its future business
container_ship_hamburg_shutterstock_648
Michael Dell. Pic by Joi Ito
Cool Texas dude is just your average billionaire