MyCity » Internet klijenti -> Web browseri » Mozilla Firefox, Highly Critical Vulnerability (20050909)

Mozilla Firefox, Highly Critical Vulnerability (20050909)

Napisano na dan: 10.9.2005

Mozilla Firefox, Highly Critical Vulnerability (20050909)
Sledeća strana Pagination

Idi na vrh

Poslao: 10 Sep 2005 08:41
Idi na vrh
offline
  • pixxel  Male
  • Legendarni građanin
  • Pridružio: 21 Jun 2005
  • Poruke: 9091
  • Gde živiš: Tu i tamo...

Highly Critical Vulnerability Reported by Secunia

SA16764 - Firefox URL Domain Name Buffer Overflow was just reported today by Secunia and is rated highly critical.

(For) Now Fx is rated as vulnerable as IE.

Description:
Tom Ferris has discovered a vulnerability in Firefox, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially to compromise a user's system.

The vulnerability is caused due to an error in the handling of an URL that contains the 0xAD character in its domain name. This can be exploited to cause a heap-based buffer overflow.

Successful exploitation crashes Firefox and may potentially allow code execution but requires that the user is tricked into visiting a malicious web site or open a specially crafted HTML file.

The vulnerability has been confirmed in version 1.0.6, and is reported to affect versions prior to 1.0.6, and version 1.5 Beta 1.

Secunia report:http://secunia.com/advisories/16764/

Test your browser for vulnerability:http://www.security-protocols.com/firefox-death.html

An xpi (for all Firefox versions and Seamonkey) has been made to apply this workaround for you:https://bugzilla.mozilla.org/attachment.cgi?id=195471

Click the link to download the file, then drag it into an open Firefox window to install it. All users should do this.
Should you ever want to uninstall this temporary fix, go to the folder Firefox is installed to, go into the defauts/pref subfolder, and delete the file 'bug307259.js'. Uninstalling it is not recommended.

You can also do this manually by changing the network.enableIDN peference to false.



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.

MyCity » Internet klijenti -> Web browseri » Mozilla Firefox, Highly Critical Vulnerability (20050909)

Ko je trenutno na forumu
 

Ukupno su 2439 korisnika na forumu :: 81 registrovanih, 7 sakrivenih i 2351 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 9191vs, Bane5, Boris90, boskelazo, Botovac, BOXRR, bpop, C-Gun, CCCP, Cicumile, CikaKURE, Clouseau, cojapop, Dare, darionis, darkojovxp, dejina811, Denaya, DENIRO, Djokkinen, Dovla 1980, draganl, Duce, Duh sa sekirom, dule10savic, dulleo, Electron, Giskard, Jester, jodzula, Kalem, Kalu128338, kikisp, Koridor 11, kovac9mm, kreker, lacko, Lazur_01, lcc, Lepi Jova, lord sir giga, Manjane, MarijaC84, MB120mm, Milan1996, milanpb, Milometer, Milos1987, Mićko, mnn2, Mzee, nebkv, nenad81, nezavisni mislilac, niksa517, Obrenovic, operniki, Paklenica, pein, peradetlić, Permaldar, Petarvu, ping15, PrincipL, procesor, Regrut Boskica, S94, Sky diver 29, Srle993, Tafocus, tomo2, umpah-pah, uruk, velisa andjelic, vidra boy, vukovi, Zastava, zemljanin, ZetaMan, Zoran1959, 223223