Welcome to WebmasterWorld Guest from 54.161.227.32

Forum Moderators: incrediBILL

Message Too Old, No Replies

New Firefox 1.0.3 Vulnerabilities

Cross-site scripting attacks use iframes plus update function

     
4:09 pm on May 9, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 8, 2001
posts:766
votes: 0


haven't seen it here but only did a quick search so dismiss if already posted. Two vulnerabilities have been discovered in Firefox that can compromise a user's system.

No patch as of yet, more info at
[secunia.com...]

Current solution is to disable JavaScript

1:28 am on May 11, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 4, 2004
posts:801
votes: 0


"but in Firefox 1.1 we will have binary patching (aka sweet, simple, small, efficient updates)"

That's from the link posted by jdmorgan.

How long did 1.0.4 take to get released? 2 days for the testing version? I'll stick with Firefox, no problem.

2:01 pm on May 11, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 16, 2002
posts:2010
votes: 0


I recommend the Stipe optimized 1.0.4 build which just came out.
Be sure to backup your current firefox folder and settings folder before trying this but I think you'll be pleasently surprised at the speed boost.

(for all cpu types)
installer version:
[pryan.org...]

or self-extracting zip:
[pryan.org...]

I am able to unzip the files right over my 1.0.3 with no profile rebuilding needed.

(some people are reporting a startup error if they use the spellbound extension but Firefox will still work fine)

4:59 pm on May 11, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Apr 20, 2004
posts:1477
votes: 0


Thanks for the stipe tip, amznVibe.

After zipping my FF program directories, I installed the .EXE stip-build right into my old FF directory.

No problems, and now surfing with stipespeed! :)

3:21 am on May 12, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 31, 2002
posts:25430
votes: 0


Firefox 1.0.4 [mozilla.org] final is now available for download.

Jim

3:35 am on May 12, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 31, 2002
posts:25430
votes: 0


For this upgrade, it is recommended that you do a clean install:

Firefox 1.0.4 Release notes/Installation instructions [mozilla.org]

Jim

6:09 pm on May 12, 2005 (gmt 0)

Full Member

10+ Year Member

joined:July 24, 2002
posts:291
votes: 0


<side note>Google Maps doesn't seem to recognize the Stipe build. Interesting</side note>
5:55 am on May 14, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 16, 2002
posts:2010
votes: 0


I fix google maps by changing the user-agent to be more generic on starup.

Put this into "user.js":

user_pref("general.useragent.override", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0");
11:06 am on May 14, 2005 (gmt 0)

Senior Member

WebmasterWorld Senior Member g1smd is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:July 3, 2002
posts:18903
votes: 0


As well as Firefox 1.0.4 there is a new version Mozilla 1.7.8 out too.
This 38 message thread spans 2 pages: 38
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members