Home › News › Industry News
Firefox vulnerability leaves cookies exposed
By injecting text string that includes "x00," normal safeguards can be bypassed, allowing the browser to be fooled about the origin of a domain trying to set or modify a cookie. The sleight of hand makes a victim's browser appear to be talking to trustedbank.com when in fact it is receiving data from evilhackers.com.
It affects versions up to 2.0.0.1, and the linked article contains demonstrations. It is already reported in Bugzilla and hopefully the Mozilla dev deam will release a patch soon.
Related Stories
User Comments (3)
Post a comment|
canadian
on February 14, 2007 11:00 PM |
Do news items like this mean Firefox is horrible because of all these security holes, or its great because when ever a hole is found, it makes the news? |
|
kitty500cat
on February 15, 2007 9:55 AM |
in the related stories, it says flaws discovered in IE. no joke.Firefox is still more secure, I guess, maybe cuz it's slightly less used and thus less targeted. |
|
Soul Harvester
on February 15, 2007 4:44 PM |
[b]Originally posted by canadian:[/b][quote]Do news items like this mean Firefox is horrible because of all these security holes, or its great because when ever a hole is found, it makes the news?[/quote]It's called coverage. With the millions upon millions of FireFox users, do you think all of them have a newsletter subscription that alerts them when they should update, or that every single FF user has automated updating turned on? People like to hear about these things because it keeps them informed to something very relevant to a typical desktop user. If there is a flaw found in Opera, IE, FireFox, Konqueror, Safari or any other browser worthy of note that could leave data vulnerable, we'll talk about it. |
Most Popular
| Trending | Featured |
-
iOS 5.1.1 untethered jailbreak tool released, supports 4S, iPad 3
-
After five days, Facebook ranks as worst IPO flop of the decade
-
Rumor: Windows 8 RC will launch June 1, will ship with Adobe Flash
-
Rumor: AMD "Piledriver" FX CPU production to begin Q3 2012
-
Diablo III becomes the fastest-selling PC game in history
Editors' CPU Picks
Subscribe to TechSpot
Get free exclusive content, learn about new features and tech breaking news.
