Alleged 'Unfixable' Exploit in Firefox
506145
An overflow of stories concerning an alleged Firefox 1.5 exploit hit the Web over the weekend, emerging from an underground users' conference in San Diego.  But well into the morning, evidence that the exploit was either new or severe, remained sparse.
337058
Unpatched bugs that could allow attackers to take over Windows systems via Internet Explorer. The bugs were discovered by security company FrSIRT and reported to Adobe a week ago.
124001
Firefox and Internet Explorer 7 do not properly handle JavaScript "onUnload" events and can be tricked into taking a user to the wrong URL, according to security researcher Michal Zalewski.
8251
One of the speakers at a Toorcon security conference session last weekend has admitted that claims he and an accomplice made regarding an "unfixable" flaw in Firefox, and a video of the two purportedly exploiting this flaw, were a not-so-elaborate hoax.
640391
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim&#39;s machine.The problem is similar to other&#160;data leakage&#160;flaws found in the open-source browser, according to researcher Gerry Eisenhaur, who first reported the problem on Saturday.Eisenhaur has posted sample code that reads the contents of a Mozilla Thunderbird preferences file, but he believes that attackers could get access to more information with variations on his attack. &quot;It&#39;s possible to load any JavaScript file on a victim&#39;s machine,&quot; he wrote in his blog posting. &quot;This looks very interesting and may have bigger potential, but for now, it&#39;s just another information disclosure [flaw].&quot;&quot;It could become something more if there was an application that stored sensitive data inside JavaScript files,&quot; he said via instant message. &quot;Some plugins have been known to store usernames and passwords.&quot;&quot;Its also just a powerful way to do recon,&quot; he added.Hackers have discovered a number of flaws in recent months that take advantage of the way that browsers pass information between different components within the Windows operating system. Some of these URI (Uniform Resource Identifier) protocol handler flaws have led to serious security problems for both Firefox and Internet Explorer.This latest flaw affects only certain Firefox add-ons, such as the Download Statusbar or Greasemonkey, which store scripts in a fashion that lets them be discovered on the hard drive, said Window Snyder, Mozilla&#39;s security chief in a Wednesday blog posting.Firefox is investigating the issue and has rated it as a low-severity problem, she said.
44372
A flaw in the way the Firefox and Opera browsers handle an image file could allow an attacker to see what Web sites a person has visited.
260192
Mozilla will patch a security bug in Firefox that could be attacked in Internet Explorer.
93571
A zero-day flaw in Firefox and third-party Windows patches turn up the heat for Net users. Plus: Buyout boom in security.
635199
The discovery of vulnerabilities in the Firefox Web browser might not be as critical as they were made out to be by a pair of hackers who presented their findings at a recent gathering of software and security experts.
103752
It ended up not being Adobe's problem to begin with anyway: a vulnerability that enabled JavaScript code within a specifically crafted URL to run unchecked, and launch any executable code. When Petko D. Petkov of GNUCitizen.org discovered the problem, it appeared to have been directly triggered by Adobe Acrobat or Adobe Reader.
630854
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim's machine.
745224
Security experts uncovered yet another bug in Internet Explorer this week, one that could let attackers replace the content of any legit site with their own, making it possible to spoof critical pages such as e-bank account access log-in forms or credit
16648
Opt-out button in spam used to run exploit
99286
THE MOZILLA FOUNDATION has announced that a hole in its Firefox software has been patched. Firefox suffers from a vulnerability that could allow hackers to delete all the files in the Download directory.
69359
PC Magazine - A public claim by hackers that Mozilla's Firefox browser is vulnerable to multiple code execution vulnerabilities may be a joke gone awry.
448507
An independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect.
373714
The bug, when paired with Firefox, allows hackers to hijack PCs and Macs.