slowday444 Posted November 26, 2007 Share Posted November 26, 2007 No auto update yet here though. Link to comment Share on other sites More sharing options...
Humpty Posted November 26, 2007 Share Posted November 26, 2007 The Mozilla Quality Assurance Community has called for volunteers to help test Release Candidate Builds of Firefox 2.0.0.10, which is expected to be released next week, following the Thanksgiving holiday. Firefox 2.0.0.10 addresses a Java Archive handling bug that was first reported back in February. The vulnerability allows a malicious attacker to conduct a cross-site scripting attack by hiding exploit code in a Java Archive (.jar) file. This is because the .jar protocol is not restricted to .jar files and will open .zip files, which can be malicious. "In simple terms, [this] means that any application which allows upload of .jar/.zip files is potentially vulnerable to a persistent cross-site scripting," said Petko Petkov, founder of security consultancy gnucitizen.org, in blog post earlier this month. "Potential targets for this attack include applications such as Web mail clients, collaboration systems, document sharing systems, almost everything that smells like Web 2.0, etc., etc., etc." The browser update also addresses a redirection bug related to .jar/.zip files. Article Link to comment Share on other sites More sharing options...
Tom419 Posted November 27, 2007 Share Posted November 27, 2007 Just found it Link to comment Share on other sites More sharing options...
JDPower Posted November 27, 2007 Share Posted November 27, 2007 Available via auto update now Fixes in this version: http://www.mozilla.org/projects/security/k...firefox2.0.0.10 Link to comment Share on other sites More sharing options...
Sputnik Posted November 27, 2007 Share Posted November 27, 2007 got it. thanks Ceci n'est pas une signature Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now