Monday, November 11, 2002

Six Mozilla Security Bugs Posted

If you're using early copies of the Mozilla open-source Web browser, chances are your PC is vulnerable to attacks via a half-dozen security holes.

Pre-version 1.0 rollouts of the alternative browser project, which is backed by AOL-Time Warner's (Quote, Company Info) Netscape unit, contain about a half-dozen vulnerabilities.

It appears most of the bugs, which were posted on the BugTraq security list this week, have already been corrected in the latest version of Mozilla but at least one of the flaws is still affecting versions 1.0.1 and 1.1. (Download latest Mozilla releases here).

Mozilla users are urged to disable JavaScript as a temporary workaround until a fix is issued. The flaw exists in the "onunload" handler which loads an image from the referring server about a user's surfing movements.
http://www.internetnews.com/dev-news/article.php/1495711

No comments:

Post a Comment

con·cept