Welcome to WebmasterWorld Guest from 54.227.110.209

Forum Moderators: incrediBILL

Message Too Old, No Replies

New Firefox 1.0.3 Vulnerabilities

Cross-site scripting attacks use iframes plus update function

     

bateman_ap

4:09 pm on May 9, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



haven't seen it here but only did a quick search so dismiss if already posted. Two vulnerabilities have been discovered in Firefox that can compromise a user's system.

No patch as of yet, more info at
[secunia.com...]

Current solution is to disable JavaScript

2by4

1:28 am on May 11, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



"but in Firefox 1.1 we will have binary patching (aka sweet, simple, small, efficient updates)"

That's from the link posted by jdmorgan.

How long did 1.0.4 take to get released? 2 days for the testing version? I'll stick with Firefox, no problem.

amznVibe

2:01 pm on May 11, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I recommend the Stipe optimized 1.0.4 build which just came out.
Be sure to backup your current firefox folder and settings folder before trying this but I think you'll be pleasently surprised at the speed boost.

(for all cpu types)
installer version:
[pryan.org...]

or self-extracting zip:
[pryan.org...]

I am able to unzip the files right over my 1.0.3 with no profile rebuilding needed.

(some people are reporting a startup error if they use the spellbound extension but Firefox will still work fine)

StupidScript

4:59 pm on May 11, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks for the stipe tip, amznVibe.

After zipping my FF program directories, I installed the .EXE stip-build right into my old FF directory.

No problems, and now surfing with stipespeed! :)

jdMorgan

3:21 am on May 12, 2005 (gmt 0)

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Firefox 1.0.4 [mozilla.org] final is now available for download.

Jim

jdMorgan

3:35 am on May 12, 2005 (gmt 0)

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member



For this upgrade, it is recommended that you do a clean install:

Firefox 1.0.4 Release notes/Installation instructions [mozilla.org]

Jim

Neo541

6:09 pm on May 12, 2005 (gmt 0)

10+ Year Member



<side note>Google Maps doesn't seem to recognize the Stipe build. Interesting</side note>

amznVibe

5:55 am on May 14, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I fix google maps by changing the user-agent to be more generic on starup.

Put this into "user.js":

user_pref("general.useragent.override", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0");

g1smd

11:06 am on May 14, 2005 (gmt 0)

WebmasterWorld Senior Member g1smd is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



As well as Firefox 1.0.4 there is a new version Mozilla 1.7.8 out too.
This 38 message thread spans 2 pages: 38
 

Featured Threads

Hot Threads This Week

Hot Threads This Month