Mozilla confirms critical Firefox bug.

[JMH]

Mozilla yesterday confirmed a critical vulnerability in the newest version of Firefox, and said it would plug the hole by the end of the month.
Although the patch won't be added to Firefox before next week's Pwn2Own browser hacking challenge, researchers won't be allowed to use the flaw, according to the contest's organizer.

"The vulnerability was determined to be critical and could result in remote code execution by an attacker," Mozilla acknowledged in a post to its security blog late Thursday. "The vulnerability has been patched by developers and we are currently undergoing quality assurance testing for the fix."

Source -
Mozilla confirms critical Firefox bug

 

[Darryl Licht]

That will show all my Firefox using friends that IE8 isnt so bad afterall!

:roflmao:

 

[FZ21Z]

That will show all my Firefox using friends that IE8 isnt so bad afterall!

Hasn't changed my opinion of I.E at all.

Thanks for the heads up! Updating to 3.6.2 now.

 

[fseal]

That and the half dozen security fixes just posted for Chrome...

What's really sad about the browser bravado is that people tell their less knowledgable friends and family to "switch to X and you'll be safe" and then they actually THINK they are safe and never bother to update, making themselves in some cases even less safe than ever. (Heck a lot of fanbois themselves are like that)

Choose a browser for features, but then make sure it is secured properly after install (limited scripts on unknown sites, allow scripts only on selected sites as needed, popup and cookie control etc etc) and kept up to date whatever it is. Teach that to your friends and family and they'll be a LOT safer too.

 

[Darryl Licht]

That and the half dozen security fixes just posted for Chrome...

The fixes are due to a Canadian browser hackfest starting this week... just shoring up security to prevent the hackfest from blowing them up!

 

[fseal]

That and the half dozen security fixes just posted for Chrome...

The fixes are due to a Canadian browser hackfest starting this week... just shoring up security to prevent the hackfest from blowing them up!

They were holes regardless, several severe ones too. Would they have NOT fixed them before the hacker fest? Is the hacker fest the only place they were expecting to get hacked? Would they ave stayed there indefinately if not for it?

It doesn't matter when or why, the holes were there in every download made. There are probably 100 more waiting... And since every version released has them if Chrome users don't feel that they are vulnerable or know anything about it then guess what? Unpatched browsers by the tens of thousands just sitting ripe for pwnage...

No browser is "safe" for very long. That's the lesson. Hand secure it, keep it updated. Don't lie to people (not you personally) about this or that being "safe" or "Safer" it's not true. never was is or will be.

 

[Pixelpro]

Im still on the Mozzila before that build and havnt upgraded yet. So i think im safe as it is.

 

[manhunter2826]

related thread here for folks who might wish to read comments:
http://www.sevenforums.com/news/72323-mozilla-confirms-critical-firefox-bug.html

 

[Darryl Licht]

They were holes regardless, several severe ones too. Would they have NOT fixed them before the hacker fest? Is the hacker fest the only place they were expecting to get hacked? Would they ave stayed there indefinately if not for it?

Very true fseal...

However, I'm sure that the browser hack-fest had something to do with the release of all these updates this week. The bad publicity from the loser of this hack-fest will surely affect whoever comes out on the bottom, and Firefox knows it's current version has several "holes". They just wanted to plug the "holes" before such a widely publicised browser security war.

 

[MadMaxData]

I don't know what the big deal is with Firefox. I tried it out for about 3-4 days, and then went right back to IE8. It was a kiddy browser if you ask me.

 

[Darryl Licht]

I don't know what the big deal is with Firefox. I tried it out for about 3-4 days, and then went right back to IE8. It was a kiddy browser if you ask me.

I dont know about a kiddy browser, but back in the IE6 days FF was a vastly more secure browser. I think that things are pretty even now.

 

[MadMaxData]

I guess I've been very lucky with viruses. I've only got one real bad one, and that was through an e-mail [Outlook].

 

[Wii Master 64]

Well, just updated, but I didn't know it was a beta until now. But hey, I don't mind running beta software, I ran Firefox 3.6 beta for about a month before it came out.