Critical Vulnerability in Firefox

Sorry if this was allready posted, but according to www.secunia.com there is a critical vulnerability in Firefox.

 

Actuially there's 2...just disable JavaScript until a fix is released and there are no worrries. I wouldn't be surprised if the fix is out tonight

 

LOL. I knew some pro-IE people would start making trouble!

 

http://secunia.com/product/11/

'Nuff said...... I count 29 problems on that page

 

Never mind the browsers the underlying operating systems have faults too: http://secunia.com/product/16/

 

Same site.

Internet Explorer 6.x has 61 unpatched vulnerabilities.

Mozilla Firefox 1.x has 11 unpatched vulnerabilities.

I will put my money on Firefox, fewer security issues than IE.

 

I use Intel/AMD IE/Firefox MS/Linux. Funny thing is all my Intel systems run MS and all my AMD systems run Linux. Go figure. Can't run IE on Linux unless you are using the Wine API and then it is buggy, then again IE is buggy on Windows too. Firefox runs fine on either MS/Linux. Win XP and Linux 2.4/2.6 Kernals are plenty stable, both have security issues straight out of the box, you have to harden both to make them secure.

 

You can also protect yourself by going to Tools > Options > Web Features and disabling "Allow web sites to install software". If you're truly paranoid you can do both.

 

Wouldn't call it being paranoid, just following the recommendations of the people that make the browser

 

btw, I just noticed 1.0.4 is available for download on the Major Geeks home page. Should take care of the problems

 

I can already tell you guys that an updated firefox build (1.0.4) was quickly drafted and will shortly be released (within hours AFAIK.)

 

I admit I did do both. Mozilla has made changes at the two sites that are whitelisted by default, though, so unless you've added more sites there's little threat left. But if you surf the internet and you're not paranoid, you're probably not very bright.

 

uh yeah

 

I surf the internet constantly and I'm not paranoid. I don't think that qualifies as "not bright". Not bright would be clicking on a bunch of crap that you shouldn't be clicking on, or not taking preventative measures before you click on crap that you shouldn't be clicking on (you know you do it). If you're paranoid you shouldn't be on the internet because somebody is stealing your identity as you read this...

 

Just checked Mozillazine, the release candidate build of Firefox 1.0.4 that's available does contain fixes for these vulnerabilties. Of course, since it's an RC build, it could have bugs in it.

 

No longer RC, it's now an official release.