07-06-2005, 14:23
|
#1
|
|
Inactive
Join Date: Jun 2003
Location: Essex innit
Age: 52
Services: Sky HD + 16Mb ADSL
BT Telephone
Posts: 15,735
|
Firefox regains a bug
El Reg
Quote:
A seven year-old type of vulnerability has been inadvertently re-introduced in the latest versions of Mozilla and Firefox. The resurrected flaw could be used by hackers or potential fraudster to spoof the contents of websites, Danish security alert firm Secunia says.
The security bug - "moderately critical", Secunia says - stems from a failure to check if a target frame belongs to a particular, opened website. This allows one browser window to load content into a named frame of another window.
This frame injection vulnerability has been confirmed in Firefox 1.0.4 and Mozilla 1.7.8. Version 0.8.4 of the Camino browser for Mac OS X - but not version 0.8.3 - is also vulnerable. Other versions may also be affected. Secunia has constructed a test here. It advises surfers to avoid browsing untrusted sites while browsing trusted sites pending a fix from the Mozilla Foundation.
In July 2004, Secunia warned that a similar frame injection vulnerability affected certain flavours of IE and Opera as well as earlier versions of Mozilla. ®
|
|
|
|
|
07-06-2005, 14:38
|
#2
|
|
Inactive
Join Date: Jun 2003
Services: Virgin Media
Posts: 9,163
|
Re: Firefox regains a bug
Whoops 
__________________
I just tried the test (I am using F.F 1.04) and nothing happened 
|
|
|
|
|
07-06-2005, 15:03
|
#3
|
|
Inactive
Join Date: Apr 2004
Location: Minas Tirith, Gondor
Age: 61
Posts: 3,458
|
Re: Firefox regains a bug
Didn't affect me on FF 1.04 either - using Tabbroser extensions.
|
|
|
|
|
07-06-2005, 15:06
|
#4
|
|
Trollsplatter
Cable Forum Team
Join Date: Jun 2003
Location: North of Watford
Services: Humane elimination of all common Internet pests
Posts: 38,607
|
Re: Firefox regains a bug
Oops, silly coders ... but what's the betting the damage is undone in a matter of hours.
|
|
|
|
|
07-06-2005, 15:07
|
#5
|
|
Inactive
Join Date: Jun 2003
Age: 45
Posts: 14,750
|
Re: Firefox regains a bug
Quote:
|
Originally Posted by Aragorn
Didn't affect me on FF 1.04 either - using Tabbroser extensions.
|
Me either, it just opens up as a new tab.
Seems like a fix could be easier than people think
|
|
|
|
|
07-06-2005, 15:20
|
#6
|
|
Inactive
Join Date: Jun 2003
Location: Treasure Island
Age: 80
Services: NTL cable 20mb Broadband, V+ package.
Posts: 1,971
|
Re: Firefox regains a bug
Didn't work on me either FF 1-04
|
|
|
|
|
07-06-2005, 15:28
|
#7
|
|
Inactive
Join Date: Jun 2003
Location: Essex innit
Age: 52
Services: Sky HD + 16Mb ADSL
BT Telephone
Posts: 15,735
|
Re: Firefox regains a bug
Strangely enough it affected my browser  I opened the MSDN link in a new window and clicked the secunia link and the main frame in the MSDN window was taken over by the secunia page. All other frames were MSDN apart from the mainframe.
|
|
|
|
|
07-06-2005, 16:25
|
#8
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: Firefox regains a bug
Vulnerable here (FF 1.0.4) but not on the nightly I run at home.
|
|
|
|
|
07-06-2005, 17:07
|
#9
|
|
Inactive
Join Date: Mar 2004
Location: Glasgow, Scotland
Services: anything for a new job
Posts: 4,165
|
Re: Firefox regains a bug
same here, if you do it right it works, if you just use tabs, it does not.
ik
|
|
|
|
|
07-06-2005, 17:36
|
#10
|
|
Inactive
Join Date: Jan 2004
Location: South of England
Posts: 253
|
Re: Firefox regains a bug
This clarifies why some are affected and others aren't. As suspected, it's all to do with tab extensions.
http://forums.mozillazine.org/viewtopic.php?t=276111
|
|
|
|
|
07-06-2005, 18:25
|
#11
|
|
Inactive
Join Date: Jun 2003
Location: Los Angeles, CA
Age: 47
Posts: 6,343
|
Re: Firefox regains a bug
Actually IE has this vuln too, and it's been unpatched for a year.
http://secunia.com/advisories/11966/
|
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT. The time now is 22:31.
|
Join CF
You are here: 
