Attack code for Firefox zero-day goes wild, says researcher
|
| Author | Content |
|---|---|
| henke54 Feb 19, 2010 2:27 PM EST |
Quoting:A Russian security researcher on Thursday said he has released attack code that exploits a critical vulnerability in the latest version of Mozilla's Firefox browser. ................................... f Legerov's claim pans out, it would be one of the few times in recent memory that a zero-day vulnerability for Firefox has circulated in the wild. While the exploit is currently available only to those who pay a hefty licensing fee, wider circulation can't be far behind. This story will be updated as more is learned.http://www.theregister.co.uk/2010/02/18/firefox_zero_day_rep... |
| tuxchick Feb 19, 2010 2:37 PM EST |
Doesn't seem to affect non-Windows platforms. Paying a fee to get the exploit is an interesting, that hardly seems 'in the wild'. More like "for sale." |
| chalbersma Feb 19, 2010 3:53 PM EST |
@tuxchick Can you confim that? |
| jdixon Feb 19, 2010 4:29 PM EST |
> Can you confim that? From the Register's article: "We've played a lot with it in our labs - it was very reliable," Legerov wrote in an email to The Reg. "Works against the default install of Firefox 3.6. We've tested it on XP and Vista." Which doesn't mean the bug isn't present in the Linux version, merely that the exploit probably doesn't work. |
| Bob_Robertson Feb 19, 2010 4:32 PM EST |
> Which doesn't mean the bug isn't present in the Linux version, merely that the exploit probably doesn't work. Yep, the exploit has to get traction on the platform, even if it can get through the application. That's one thing that has always kind of bugged me about Java scripting. |
| tuxchick Feb 19, 2010 5:15 PM EST |
Yes, what jdixon said. im in ur browser stealin ur cookies.... |
| Scott_Ruecker Feb 19, 2010 5:29 PM EST |
Oh noes! My cookies! Mine mine mine cookies all mine mine mine... Oops, Did I Curium again? ;-) |
| tuxchick Feb 19, 2010 10:53 PM EST |
You did, Scott, all over your shoes. |
| Scott_Ruecker Feb 20, 2010 12:02 PM EST |
Oh darns..and here I thought I kept my mouth closed..I tried I tried..LOL!! |
Post a reply to this thread:
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
