On CNET: Google Apps shed beta label
BNET Business Network:
BNET
TechRepublic
ZDNet
285 TalkBacks

By Tom Espiner
Posted on ZDNet News: Apr 19, 2006 3:11:00 PM

Users have been urged to upgrade to the latest versions of Mozilla's software to protect themselves from a series of critical security holes.

The Computer Emergency Readiness Team (CERT) warned on Monday that earlier versions of Firefox, and other Mozilla software based on Firefox code, contain a clutch of vulnerabilities that expose users to attack.

The Mozilla Foundation released a new version of Firefox last week, version 1.5.0.2, which it said contained fixes for several security flaws.

According to security firm Secunia, there are a total of 21 flaws in the older versions of Firefox, such as Firefox 1.5, some of which it described as critical.

CERT advises people who use Mozilla's e-mail software, Thunderbird, and the Internet application suite Seamonkey to also upgrade to the latest versions (Thunderbird 1.5 and Seamonkey 1.0.1). CERT warned that any other products based on older Mozilla components, particularly the Gecko rendering engine, may also be affected.

Firefox has traditionally been seen as being more secure than other Web browsers such as Microsoft's Internet Explorer. This is thought to be the first time that multiple vulnerabilities have been reported in Firefox and the Mozilla suite.

Secunia warned that hackers could exploit the security holes to gain control of computer systems, conduct phishing attacks, and bypass security restrictions.

One error that occurs in Firefox would allow arbitrary JavaScript code to be injected into Web pages as they load.

The vulnerabilities were discovered by Mozilla researchers, including Bernd Mielke, Alden D'Souza and Martijn Wargers, as well as by 3Com researchers working on the TippingPoint Zero Day Initiative.

This initiative encourages "responsible disclosure of vulnerabilities" to vendors, to give them time to put out patches before holes are disclosed to the public. TippingPoint started to disclose the holes to Mozilla from December last year.

SponsoredWhite Papers, Webcasts, and Downloads

  • Talkback
  • Most Recent of 285 Talkback(s)
Last try...
Go here.

[url=http://mozilla.gunnars.net/]Try this page instead[/url] (Read the rest)
Posted by: osreinstall Posted on: 04/24/06 You are currently: a Guest | | Terms of Use
In that case...  Tony Agudo | 04/19/06
I updated mine last week on Ubuntu  LinuxIzTehPwn | 04/19/06
One question...  Tony Agudo | 04/19/06
A great improvement  georgep_z | 04/19/06
Lame And Unecessary  nikoli | 04/19/06
Micro suck  mrbass21@... | 04/19/06
IE only websites will have to recode for next IE  MacGeek2121 | 04/19/06
Magic Bullet is Bad Example  ZappBrannigan | 04/19/06
What planet are you from?  viking2007@... | 04/19/06
Conspiracy Myths BUSTED...  Wolfie2K3 | 04/19/06
MythBusters busted by CSI  Still Lynn | 04/20/06
"Microsoft has more compatibility to deal with?!"  JDThompson | 04/19/06
ok  xuniL_z | 04/20/06
Good support for your point!  Still Lynn | 04/20/06
Brilliant!  nomorems | 04/20/06
Wha, Wha WHAT!!!???  dbrimlow | 04/19/06
Yep  wolf5370 | 04/20/06
Speaking of Sheep.  xuniL_z | 04/20/06
You are a nut.  nomorems | 04/20/06
LOL !  nomorems | 04/20/06
So True  travisshumosic | 04/20/06
I'm with you nikoli  rmazzeo | 04/20/06
hear hear  wolf5370 | 04/20/06
Where are you now that you're with him?  Still Lynn | 04/20/06
I have nothing to do with Linux.  nomorems | 04/20/06
I think you might be on to something...  bhartman36 | 04/20/06
Hmmm - reports of flaws in December...  Confused by religion | 04/19/06
Not Possible  nikoli | 04/19/06
ROFL  viking2007@... | 04/19/06
I suspect ....  Still Lynn | 04/20/06
Not Possible  Oreamnos_americanus | 04/19/06
Not possible  nomorems | 04/20/06
How many people got hosed by Firefox problems?  MacGeek2121 | 04/19/06
Context? Ever heard of it ???  nikoli | 04/19/06
FireFox WHO?  JFD93 | 04/19/06
DDSS. (NT) (NC) (NN)  The King's Servant | 04/19/06
Plain  JFD93 | 04/19/06
Whoo-hoo! His last post! [sarcasm]  The King's Servant | 04/19/06
Whoo-hoo! His last post! [sarcasm] *NEW* The King's Servant  wolf5370 | 04/20/06
King,  nomorems | 04/20/06
wolf5370, No Mod power.  The King's Servant | 04/20/06
Careful  nomorems | 04/20/06
I know the cost of....  xuniL_z | 04/19/06
" He was infected badly"  s_gamgee | 04/21/06
Response: How many people got hosed by Firefox problems?  LegendsOfBatman | 04/19/06
I'm a Mac user  IronCladChicken | 04/20/06
But, Milly, 1.5.0.2 was out in February I think.  mdsmedia | 04/19/06
1.5.0.2 isn't secure either.....  Scrat | 04/20/06
Tuesday, April 18, 2006 3:39 PM  The King's Servant | 04/20/06
Don't throw out the baby with the bath water.  Hrothgar - PCLinuxOS User | 04/22/06
So Far So Good  nikoli | 04/19/06
What platform are using it on?  Tony Agudo | 04/19/06
Good to hear, but ...  Still Lynn | 04/20/06
Firefox Automated Updates  _dietrich | 04/19/06
Interesting point here...  viking2007@... | 04/19/06
Interesting point here...  clockmendergb@... | 04/19/06
Windows Update  wolf5370 | 04/20/06
Which laptops specifically?  xuniL_z | 04/20/06
Counterpoint  _dietrich | 04/21/06
Firefox extensions  maddog@... | 04/19/06
my extensions haven't been updated  msgvb@... | 04/19/06
Extension updates  JDThompson | 04/19/06
Not all, though  Tony Agudo | 04/19/06
Mac version Intel Native  MacGeek2121 | 04/19/06
Better  JDThompson | 04/19/06
Just the opposite for me  Still Lynn | 04/20/06
Snappier?  A. Noid | 04/19/06
I can sleep without the lid  jolumoar | 04/19/06
RE: In that case...  richdave | 04/19/06
Don't you mean "moot" not "noon" issue?  Tony Agudo | 04/19/06
At least we don't have to wait a month.  CobraA1 | 04/19/06
Problems with extensions on newer versions  msgvb@... | 04/19/06
That depends...  JDThompson | 04/19/06
I have 25 extensions  CobraA1 | 04/19/06
It's because of you guys!  wrmassa | 04/19/06
EXACTLY!!!  msgvb@... | 04/19/06
Thank you for your permission  mdsmedia | 04/19/06
I didn't complain  CobraA1 | 04/19/06
Re: I didn't complain  GreyGeek | 04/19/06
I get security bulletins via email  xuniL_z | 04/20/06
careful who you're calling a hypocrite  mdsmedia | 04/19/06
Because of US?  ydubinsky@... | 04/20/06
That's why you should switch!  Still Lynn | 04/20/06
So 21 updates just magically align in a month?  georgeou | 04/19/06
Why not?  bportlock | 04/19/06
Did you read the last paragraph?  rhinodata | 04/19/06
Do please note...  JDThompson | 04/19/06
OOOOH OOOOH!!!  viking2007@... | 04/19/06
In defense of George...  Monkey_MCSE | 04/19/06
Thanks, I have slammed Microsoft over and over on that one  georgeou | 04/19/06
Patches and patch cycles are good...  MacGeek2121 | 04/19/06
That's what I've been saying  georgeou | 04/19/06
but, George, you missed the point  mdsmedia | 04/19/06
You missed the release date.  osreinstall | 04/19/06
Ou and Secunia need to get off of this 21 updates trash talk.  The King's Servant | 04/19/06
RE:
So 21 updates just magically align in a month?  richdave | 04/19/06
No, you don't  Confused by religion | 04/19/06
RTA and read the links.  The King's Servant | 04/19/06
Umm.. No  nucrash | 04/19/06
Ummm. Yes  barsteward | 04/19/06
right . . .  CobraA1 | 04/19/06
i agree and disagree at the same time man  Monkey_MCSE | 04/19/06
No need to worry  Boot_Agnostic | 04/19/06
Oh My God!!  marbing@... | 04/19/06
Read CobraA1's comment, above.  OButterball | 04/19/06
Read the article  signup@... | 04/19/06
Ever reported a suspected bug to Microsoft?  OButterball | 04/19/06
Yes, I have  tangent001 | 04/19/06
Funny, I did that once...  mdsmedia | 04/19/06
because  einsteintech | 04/19/06
Hyuk, hyuk! Riiiight!  OButterball | 04/19/06
Oh my God, you need validation...  osreinstall | 04/19/06
Hey, osreinstall! Long time no argue!  OButterball | 04/20/06
When you install Firefox...  osreinstall | 04/20/06
Read the links.  The King's Servant | 04/19/06
EXACTLY (nt)  mdsmedia | 04/19/06
Well obviously you didn't  mdsmedia | 04/19/06
But, but, but we had "many eyes".  No_Ax_to_Grind | 04/19/06
How did they find these vulnerabilities?  Roger Ramjet | 04/19/06
Non sequitur...  ye | 04/19/06
Always!!! Nothing is perfect. Just...  MacGeek2121 | 04/19/06
Ye, did you read the article....  mdsmedia | 04/19/06
They waited for the bugs to appear  No_Ax_to_Grind | 04/19/06
BitByte, you're such a 'tard  scottyb37743_z | 04/19/06
See my reply about trolling...  No_Ax_to_Grind | 04/19/06
But dude, you are such a HUGE troll  IronCladChicken | 04/19/06
How did you come to that cockeyed conclusion?  Letophoro | 04/19/06
True, but...  Sparhawk_z | 04/19/06
Hey man.. I agree!  ju1ce | 04/19/06
Hey man.. I agree!  pjones | 04/19/06
Not saying they were.  Letophoro | 04/19/06
still can't read eh No_Ax  mdsmedia | 04/19/06
Who needs to look in the source code when...  Scrat | 04/20/06
We do have many eyes  Sabz5150 | 04/19/06
Wait..  vdraken | 04/19/06
I don't complain about that  Sabz5150 | 04/19/06
I hate to burst your bubble BUT  Shelendrea | 04/19/06
I hate to burst your bubble BUT  pjones | 04/19/06
She is right Papa jones  osreinstall | 04/19/06
I'd say 70/30 Nutscrape/Micro schmuck  Hrothgar - PCLinuxOS User | 04/22/06
Yes, FF updates ALMOST as well as IE  No_Ax_to_Grind | 04/19/06
Because nobody's perfect  Sabz5150 | 04/19/06
Now there's a job not many would want.  xuniL_z | 04/19/06
24 hours? Not this time Bubba.  osreinstall | 04/19/06
You are a bad bad man sometimes  Shelendrea | 04/19/06
IE does update easy, but  djc1309@... | 04/19/06
Nothing broken  1 more opinion | 04/19/06
Keep an eye on it because  djc1309@... | 04/19/06
More of the same old..  xuniL_z | 04/19/06
WOW - I hope  djc1309@... | 04/19/06
And those eyes found them  zclayton2 | 04/19/06
The only troll here  No_Ax_to_Grind | 04/19/06
This is getting out of hand  bitfuzzy | 04/19/06
Thank You!  scottyb37743_z | 04/19/06
Sure they found the code, AFTER being told  No_Ax_to_Grind | 04/19/06
Not enough said  1 more opinion | 04/19/06
Unless you can provide published results -- you asked for it  bitfuzzy | 04/19/06
thanks for backing it up  1 more opinion | 04/20/06
Please.  xuniL_z | 04/19/06
Um, no...  JDThompson | 04/19/06
Re: The only troll here  none none | 04/19/06
Re: The only troll here  none none | 04/19/06
No Axe you are  Bite Me_Ax_Moron | 04/21/06
No matter how many mudballs you sling...  bill@... | 04/19/06
But, but, but, it's FIXED ALREADY  Anti_Zealot | 04/20/06
Users Won't Upgrade - Here's Why  msgvb@... | 04/19/06
SOME users might not  Steven Rogers | 04/19/06
makes no sense.  shraven | 04/19/06
meaningful numbers?  msgvb@... | 04/19/06
Most users won't because  Boot_Agnostic | 04/19/06
Automatic updates  JDThompson | 04/19/06
Automatic updates?  d_jedi | 04/23/06
I have 25 extensions  CobraA1 | 04/19/06
What you smoking?  OhMyGosh | 04/21/06
I'd be taking precautions then.  jskline0@... | 04/21/06
Microsoft only responds when money is at stake.  HypnoToad72 | 04/22/06
People please  Shelendrea | 04/19/06
the only fault....  msgvb@... | 04/19/06
Hack-proof software  JDThompson | 04/19/06
Here Here! The Voice of reason!  Cayble | 04/19/06
I'm a "We Hate Microsoft" member...  mdsmedia | 04/19/06
I knew you were in sales.  osreinstall | 04/19/06
. Read up on some Windows 2000 tricks and tips  IronCladChicken | 04/20/06
Whatever.....  osreinstall | 04/20/06
Yes - He should have to  djc1309@... | 04/20/06
Where can I get a copy?  s_gamgee | 04/21/06
I build them all the time.  osreinstall | 04/21/06
Now thats a great post!  Cayble | 04/20/06
Not flaming Shel but...  mdsmedia | 04/19/06
Knock Knock  Shelendrea | 04/20/06
Since you use Fx, you should know then...  The King's Servant | 04/20/06
Why Not Let Users of Firefox know  prophotoimages@... | 04/19/06
Its because...  KWierso | 04/19/06
What about Netscape (8.1, etc) ?  JLuchford | 04/19/06
Yes, it is affected.  osreinstall | 04/19/06
AOL abandoned mail reader in new Netscape  JLuchford | 04/20/06
It should connect..........  osreinstall | 04/20/06
The Mozilla Suite isn't supported anymore?  Logomachist | 04/24/06
Where have you been?  osreinstall | 04/24/06
Typo on link.  osreinstall | 04/24/06
Nope, just ZDNet's goofy javascript  osreinstall | 04/24/06
Last try...  osreinstall | 04/24/06
Netscape uses a proprietary IMAP server  Still Lynn | 04/21/06
Too funny. Mo$hilla does it again.  xuniL_z | 04/19/06
Oi Troll Boy!  IronCladChicken | 04/19/06
Crack Smokers Not allowed  IceTheNet@... | 04/19/06
My point exactly  xuniL_z | 04/19/06
What a f***ing moronic post. Go away TROLL!! nt  mdsmedia | 04/19/06
Well la dee frickin da  xuniL_z | 04/20/06
There must be a reason why people blog with raised veins  zdnet reader | 04/19/06
But that's not a fair statement.  xuniL_z | 04/20/06
Linux desktop's are very good.  zdnet reader | 04/20/06
You people here just don't seem to get it...  DeeAitch | 04/19/06
Hey, where were you when...  xuniL_z | 04/20/06
YIKES!  DeeAitch | 04/20/06
YIKES!  DeeAitch | 04/20/06
and I thought your posts further up the tree were reasonable...  mdsmedia | 04/19/06
that's funny cause.....  xuniL_z | 04/20/06
Too Funny M$ does it again  Bite Me_Ax_Moron | 04/21/06
OK, it is annoying having to install patches  michael_t | 04/19/06
ok  Real World | 04/19/06
tried it, went back to mozilla  cls@... | 04/19/06
Have you tried to let opera identify itself as an IE browser? (nt)  michael_t | 04/19/06
Have you tried Opera V9b2?  Scrat | 04/20/06
tried it, went back to mozilla  cls@... | 04/19/06
Thanks, I installed it on my Solaris 10 box  michael_t | 04/19/06
patches? no annoyance.  cls@... | 04/19/06
very well put!! And MS users want "ease of use" nt  mdsmedia | 04/19/06
go on...? And then what?  xuniL_z | 04/20/06
You should try the easier way to patch  xuniL_z | 04/20/06
Mozilla users warned--upgrade now  Loverock Davidson | 04/19/06
Don't sweat it!  Tony Agudo | 04/19/06
gee Love*ock...where've u been??  mdsmedia | 04/19/06
Got mine before the article last week wink  The King's Servant | 04/20/06
This is news?  wkulecz | 04/19/06
Yeah, what news  999ad@... | 04/19/06
msie  null | 04/19/06
Xenophobia  brble | 04/19/06
Xenophobia  clockmendergb@... | 04/19/06
Clever monkeys  danag42@... | 04/22/06
Christians and Muslims???  SloppyMagic | 04/24/06
NEWS: ZDnet ON SLOW DRUGS  IceTheNet@... | 04/19/06
Uhm....  hawkeyeaz1 | 04/19/06
because  Shelendrea | 04/19/06
Agreed....but...  mdsmedia | 04/19/06
nothing updates without permission here  cls@... | 04/19/06
Kind of like turning off Automatic Updates in Windows...  osreinstall | 04/19/06
Better late than never ...  LilBambi_z | 04/19/06
more flame bait FUD  corticus | 04/19/06
good question (nt)  mdsmedia | 04/19/06
Chicken Little  digital@... | 04/19/06
Only if you  Shelendrea | 04/19/06
or the factor of three!  The King's Servant | 04/20/06
ahhhhhhhh but  Shelendrea | 04/21/06
That don't confront me, I'm already updated.  Mr. Roboto | 04/19/06
Stop the Lies about 21 undetected bugs!  The King's Servant | 04/19/06
Upgrade?  arfbsantoso@... | 04/19/06
Not sure what you base that on...  mdsmedia | 04/19/06
Typical sensationalist FUD from ZDnet  mdsmedia | 04/19/06
Well obviously since AOL took over Netscape  rocketzoom | 04/19/06
Hands Up Who Got Paid For Writing Here  DontFeedTrolls | 04/20/06
How many fell for the Firefox Fable?  jpr75_z | 04/20/06
Hmm.. I downloaded it because...  DCMann | 04/20/06
Firefox is sooo Secure! Ha, Ha!  null | 04/20/06
Grow Up  Shelendrea | 04/20/06
you are delusional.  xuniL_z | 04/20/06
It's important to remember...  JDThompson | 04/20/06
How many fell for the misleading stats?  The King's Servant | 04/20/06
Yes, but 21 sounds scarier.  Zogg | 04/21/06
Better standards support - and oh, yeah, the extentions  CobraA1 | 04/24/06
MSFT Admits Hiding Flaws  Chad_z | 04/20/06
Microsoft has 'fessed up to hiding details on software vulnerabilities that  null | 04/20/06
I sent my 78 year old mother this article...  JDThompson | 04/20/06
Yo Mamma...  The King's Servant | 04/20/06
HELLO??? Just Use The Updater!!!  LinuxIzTehPwn | 04/20/06
Open Source = Hack waiting to happen  Free_Thinker | 04/20/06
Open Source=Fixed before Secunia & ZDNet published!  The King's Servant | 04/20/06
eh?  belkorin | 04/20/06
Thanks Writers of ZDnet!  the_webninja@... | 04/20/06
Ddin't Firefox warn you?  The King's Servant | 04/20/06
Remember, so people don't trust auto updaters and software installers  Boot_Agnostic | 04/20/06
Sorry, so people should read some people  Boot_Agnostic | 04/20/06
After reading half of the posts  sykandtyed | 04/21/06
Pathetic Patch Program  herrwitt | 04/22/06
FireFox !!!  Unemployed IT Guy | 04/24/06

What do you think?

advertisement
advertisement

White Papers, Webcasts, and Downloads

SmartPlanet

  • Thought-provoking progressive ideas on diverse topics that intersect with technology, business, and life, and matter to the world at large. Visit SmartPlanet
  • More from IBM
  • Innovate your business' process model, play against the market, compete against others on our scoreboards and WIN! Try INNOV8 2.0: A BPM Simulator
  • Enabling Real-World Business Transformation through IBM Service Management Read the EMA Analyst Report
advertisement
Click Here