Attack code for old Firefox bug hits the net

Posted by tadelste on Dec 14, 2005 8:15 AM
By Silicon.com
Mail this story
Web version

Computer code that demonstrates how a known flaw in an older version of the Firefox or Mozilla web browsers can be exploited in a potentially crippling attack was published on the web over the weekend.

The vulnerability was fixed in Firefox 1.0.5, released in July, and in Mozilla Suite 1.7.9, according to Mozilla.

The code was published by Aviv Raff, a developer in Israel. Writing in his blog on Sunday he said: "I think it's been enough time for people to upgrade from v1.0.4 of Firefox." Raff's code doesn't do much harm but he notes that it would be easy to turn it into malicious code that commandeers a vulnerable system.

Full Story

Printed at http://lxer.com/module/newswire/view/49970/index.html