New vulnerabilities hit Firefox and Internet Explorer
111115
Blog: The most serious vulnerabilities allow attackers to run code on compromised machines.
548226
Updates to both old and new versions of Firefox and Thunderbird seek to address security and stability issues.
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
42547
(InfoWorld) - Hackers have discovered a new vulnerability in Internet Explorer, and they've released code that could be used to attack users of Microsoft Corp.'s popular browser. The vulnerability is similar to a bug thatÂ Microsoft patched last month in a multimedia component of Internet Explorer, according to Vincent Hwang, a group product manager with Symantec's Security Response team. Though a sample exploit of the vulnerability was posted Wednesday by hackers on the xsec.org Web site, Symantec has yet to see the code used in any attacks, according to Hwang. To take advantage of the exploit code, attackers would first need to trick users into viewing a maliciously encoded Web page, but they could then run unauthorized code on a victim's computer. It is unclear right now which versions of Windows and Internet Explorer are affected by the vulnerability. Researchers at Secunia said they were able to create a "fully working" exploit for the latest version of Windows XP running Internet Explorer 6. Windows 2000 users are also vulnerable, Secunia said. Microsoft security researchers were unavailable to comment on the issue, but a spokesman for the company's public relations agency said that the matter was under investigation. Symantec calls the bug "critical," andÂ Secunia rates the issue as "highly critical," its most severe rating. The xsec.org hackers referred to their code as a 0day, meaning an exploit for a previously undisclosed vulnerability. But one well-known hacker said the flaw was not difficult to find using publicly available security tools, such as the AxMan ActiveX fuzzing software. "Calling it 0day is a stretch," said HD Moore, the head of the Metasploit project, via e-mail. Moore wrote an automated ActiveX testing tool called AxMan that uncovered a handful of IE bugs, including the one exploited by on xsec.org. Although Moore recently launched a project called the Month of Browser Bugs, in which he disclosed a new browser vulnerability every day for the month of July, he said he had refrained from disclosing this particular vulnerability. "This is one of the many exploitable bugs that can be discovered using AxMan and one of the few that I didn't include in Month of Browser bugs due to the ease of exploitation," he said. "I still have three or four left in IE that have similar impact." This is the second unpatched flaw that Microsoft is looking at patching right now. Earlier this month, attackers began exploiting a vulnerability in the company's Word software.
350003
TechWeb - The problematic fix, issued last December, affected the Firefox browser and the SeaMonkey application suite.
676055
Three more vulnerabilities in Microsoft&#39;s Internet Explorer 6.0 browser were disclosed by Danish security vendor Secunia. By Gregg Keizer, TechWeb News.
363180
Floor by flaw The latest versions of Internet Explorer and Firefox on Windows and (in the case of Firefox) Unix systems are vulnerable to attacks that could reveal the contents of sensitive files residing on a victim's hard drives.â¦
29646
Users of Firefox yesterday began receiving notices of the availability of version 2.0.0.7, which the Mozilla organization said addresses a vulnerability involving Apple's QuickTime plug-in. In BetaNews tests of the new version this afternoon, the vulnerability in question appears to have been fully patched.
7483
Every time a new IE security flaw is announced, or whenever someone gets fed up with hackers manipulating their Web browser, Firefox and other Mozilla-based browsers get a bump in the marketplace.
605863
com staff. Danish security firm Secunia has reported a &quot;moderately critical&quot; window injection vulnerability in Firefox, Internet Explorer, Opera, Netscape, Safari and Konqueror.
211363
An anonymous reader writes &quot;All browsers have been reported vulnerable to different vulnerabilities today. Starting with: Internet Explorer on XP SP1/SP2, which suffers a new system compromise (of course) vulnerability.
166415
Microsoft has released an update to Internet Explorer to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
727620
A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla Corp. said it plans to patch the problem in its next Firefox software update.
204799
A new flaw has been discovered in Microsoft&#39;s Internet Explorer browser that allows malicious users to create fake sites that could lead to new email phishing scams.
188255
Pass the parcel bug binned Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.â¦
478094
Security firm Secunia has detailed a new flaw in Internet Explorer that affects users running Windows XP Service Pack 2. The vulnerability involves drag-and-drop, which can be used within a Web page to place a malicious program in the Windows startup folder.
738749
Three more vulnerabilities in Microsoft&#39;s Internet Explorer 6.0 browser were disclosed Wednesday by Danish security vendor Secunia, bringing the total of IE bugs found by the firm in the last two months to an even dozen.