Pop-up blocker problem found in Firefox
14206
InfoWorld - A flaw in the pop-up blocker of the open-source browser Firefox could allow an attacker to access local files, according to security analysts.
509769
News.com&#39;s John Borland lays out the issues with shelving Microsoft&#39;s insecure Internet Explorer with a non-MS brower, such as Firefox... The problem is that many Web developers create their sites so they
372712
Mozilla Corp. may add a tool to the next version of its Firefox browser that would block Web sites identified by Google as potentially harboring malware.
420080
An update to Firefox fixes a number of security flaws in the browser.
614724
The Firefox browser is vulnerable to a flaw related to its pop-up blocker technology that could give access to local files, security analysts said.
336569
A security issue has been discovered in a common feature included in several Web browsers, including Mozilla, Firefox, Opera, Konqueror and Camino.
6528
Mozilla browser is less complete than Internet Explorer but is much more than just an anti-Microsoft statement. Is computing not making the progress it used to, or did I just read a story
99286
THE MOZILLA FOUNDATION has announced that a hole in its Firefox software has been patched. Firefox suffers from a vulnerability that could allow hackers to delete all the files in the Download directory.
350003
TechWeb - The problematic fix, issued last December, affected the Firefox browser and the SeaMonkey application suite.
708445
Most sites are ignoring a new Firefox add-in that can block Web ads. The Daily Kos, however, is asking users of the product to buy subscriptions.
657731
Google is working to fix a bug in the Google Toolbar that could allow criminals to steal data or install malicious software on a system, a security researcher warned Tuesday.The flaw lies in the mechanism Google Toolbar uses to add new buttons on the browser. Because the toolbar does not perform adequate checks when new buttons are being installed, a hacker could make his button appear as though it was being downloaded from a legitimate site when in fact it came from somewhere else. By spoofing the origin of the toolbar button, an attacker could download malicious files or launch a phishing attack against the victim, wrote security researcher Aviv Raff in a blog post on the issue.Raff has posted proof of concept code, showing how such an attack would work with the Internet Explorer browser. A Google spokeswoman confirmed Tuesday that the company is working to fix the problem.The attack requires many steps. First, the victim would have to be tricked into clicking on a Web link that would then pop up a window asking the user if he wants to install a custom button on his toolbar. Because of the flaw, this alert could look like it was downloading the button from a legitimate site, such as Google.com, even if it were not. Once the button was installed on the toolbar, the victim would then have to click on it and, finally, agree to download and run an executable file for the malicious software to be installed.Because the user would have to go through so many steps in order to fall victim to the attack, the bug isn&#39;t a critical one, said Marc Maiffret, an independent security researcher. &quot;While it is interesting, it&#39;s probably a low threat compared to other flaws out there,&quot; he said.Still, it was sloppy work on Google&#39;s part to miss such a simple attack, he said. &quot;They should definitely assess how it slipped through the cracks,&quot; he said.This is not the first obvious Google flaw that Raff has found. Last month, he showed how a simple Web programming error on the Google.com Web site could allow attackers to launch what&#39;s known as a cross-site scripting attack.Because Google&#39;s programmers didn&#39;t properly check the HTML generated by the Google search engine, Raff was able to create a specially crafted Google link that, when clicked by the victim, would trick the browser into running unauthorized scripting code. This type of link could be used to steal the victim&#39;s Google account or conduct phishing attacks, Raff saidThis error was fixed by Google just hours after Raff notified the company of the problem, but a demo of the flaw being exploited can be seen online.
619489
In the very week Mozilla Firefox Version 1.0 was launched, a series of potentially nasty security holes have been uncovered in older versions of the browser.
220418
Mozilla disclosed Monday that it had opened up a vulnerability with a previous security fix for its Firefox, Seamonkey, and Thunderbird clients. According to an advisory issued Monday, a new JavaScript issue was introduced that would allow coding from Web content to be exploited to execute arbitrary code.
165927
Critical Opera and Firefox bugs menace IE-refuseniks There's bad news for users of alternative browsers this Friday, with both Opera and Firefox subject to security vulnerabilities.â¦
52141
In a Nov. 10 product review of the Mozilla Firefox browser, The Associated Press reported erroneously that the Internet Explorer browser from Microsoft Corp. does not have a pop-up blocker. The summer release of Service Pack 2, a security update available only for Windows XP computers, included a pop-up blocker.
638921
Security firm Secunia has issued an advisory regarding a newly discovered "highly critical" security flaw in Firefox 2.0 and later, which involves a special URI handler. Although the problem was initially attributed to Internet Explorer by researcher Thor Larholm, Firefox is the culprit.
572892
Four new unpatched vulnerabilities have been published for Internet Explorer and Firefox, with two coming for each browser.