Firefox 3 Alpha Blocks Malware, Secures Plug-in Updates
546373
Thursday's alpha 8 release exposes several new security features to the public for the first time.
284038
Some of Firefox's most popular third party extensions, including toolbars from Google, Yahoo and Facebook, create a massive security hole by failing to use secure update servers, according to a security researcher.
492868
TechWeb - A new proof-of-concept code is circulating for a Firefox vulnerability that was fixed in Mozilla's security update that was released last week.
91169
Mike told me it would be okay to use Firefox 3 beta on the Mac. So I am. So far so good.  Firefox 2 was starting to hang every five minutes. But one of my critical plugins doesn't work in Firefox 3. Arrrrrrrrrrrrrrrrgh. Software sucks.&trade;
725728
InfoWorld - The Mozilla Foundation has published a fix for a &quot;critical&quot; JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
397083
Mozilla has confirmed a vulnerability in its Firefox browser that could be used by attackers to scout out a system before they undertake a more aggressive assault.
326735
InfoWorld - Makers of some of the most popular extension software used by the Firefox browser are not doing enough to secure their software, a security researcher said Wednesday.
339220
Second beta version of the upcoming browser features an improved interface, phishing protection.
558542
Easy-peasy-sleazy: A new piece of PHP code making the malware rounds can install a phishing site on a compromised server in about two minutes.
605863
com staff. Danish security firm Secunia has reported a &quot;moderately critical&quot; window injection vulnerability in Firefox, Internet Explorer, Opera, Netscape, Safari and Konqueror.
116046
Help on the way Mozilla's chief of security has confirmed a vulnerability that could cause fully patched versions of Firefox to expose a user's private data.â¦
526152
The Mozilla Foundation has fixed 10 security bugs in its open-source Mozilla and Mozilla Firefox browsers and Thunderbird e-mail reader, with the release of new versions of all three products this week. Some of the vulnerabilities could allow attackers to run malicious code on a user's PC via a malicious e-mail, a specially crafted vCard or a malformed graphic on a Web site, project leaders said.
47409
Mozilla works to fix a Firefox browser flaw that could give attackers unauthorized access to data on a victim's PC.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
270923
Mozilla Firefox is a safe, free, fast, simple and compatible Web browser that may be the answer to letting go of Internet Explorer once and for all.
369010
(InfoWorld) - Mozilla patched its flagship Firefox browser Thursday with fixes for six vulnerabilities, one of which was stamped "critical" by the open-source developer. This was the third time Mozilla has updated Firefox in 2007. The updates bring the current browser to Version 2.0.0.4 and the 2005 edition to 1.5.0.12. MFSA 2007-12, the most serious of the six, patched 30 separate memory corruption bugs in the browser layout and JavaScript engines. Even Mozilla seemed unsure of their impact. "Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort, at least some of these could be exploited to run arbitrary code," the advisory read. Mozilla warned Thunderbird and SeaMonkey that their e-mail software, which shares Firefox's layout engine, may be vulnerable to these bugs as well. The developers recommend that users do not enable JavaScript in Thunderbird or the mail portion of SeaMonkey. The updates also fix a pop-up bug that could be used to mask parts of the browser, such as the address bar; a cross-site scripting vulnerability; a problem with how the browsers handle cookies; and a flaw that could let attackers crash Firefox using its autocomplete feature. Firefox 2.0.0.4 can be downloaded from the Mozilla Web site for Windows, Mac OS X, and Linux; Firefox 1.5.0.12, meanwhile, is available from a different page. Current users can also update using the Check for Updates command in the help menu. Mozilla also reiterated that Thursday's patches would be Firefox 1.5's last and said that an update to Firefox 2.0.0.4 would be offered to its users "over the coming weeks." Although Firefox ended 2006 on an upbeat security note according to Symantec -- the anti-virus vendor tallied 40 patches in the last six months of the year, 26 percent fewer than the 54 released for rival browser Internet Explorer -- so far this year, Mozilla has addressed more than twice as many vulnerabilities as IE. In the first five months of 2007, 22 bugs in Firefox have been patched, nine of which were pegged as critical. Microsoft has fixed only eight in IE; seven were labeled critical.
409383
Beta version makes it clear that the final Firefox 3 will include some nice extras but won't push the boundaries for browser upgrades.