Firefox 1.5 vulnerability



Incidents.org has reported on the first announced vulnerability with Mozilla Firefox 1.5 since it’s release. The vulnerability is along these lines. History of visited sites is kept in a file called history.dat IF a URL for a visited site is long enough it will cause a buffer overflow and denial of service. (After visiting such a url, the browser will crash on each attempted start. (until history.dat is deleted.))


There is proof of concept code, there is also speculation that it could be made to do worse (malicious code execution.) No fix is available yet. I’ll be eager to see how quickly firefox responds.

There is a possible workaround…

POSSIBLE WORKAROUND

However, the following is a workaround that should work (if it doesn’t let me know). Go to Tools -> Options.

Select the Privacy Icon, and then the History tab. Set the number of days to save pages at 0. This will disable writing anything to history.dat as far as I can tell, and should nullify the exploit.

Related Posts

Blog Traffic Exchange Related Posts
  • Windows Police Pro Yes folks, it's Windows Police Pro, the gift that keeps on giving apparently. It's crawled back into Googles top searches tonight. If you want to see how to remove it look at Windows Police Pro Removal, you may be interested in Who is behind Windows Police Pro and probably will......
  • Internet Explorer in standalone mode? Now, it can be useful to run several versions of the same program at the same time (especially if it's a web browser.) I've accomplished this under linux with internet explorer, but didn't realize there was a way to do so on Windows. Sunbelt blog found a good guide to......
  • Firefox Security Vulnerabilities. In the spirit of a fair look at Mozilla Firefox (after doing a bit of a roasting of IE's security), I've taken a look at Secunia's analysis of Firefox. Currently there are 3 unpatched vulnerabilities on Firefox. This is the summary graphic for what has been addressed since 2003. I......
Blog Traffic Exchange Related Websites
  • HostGator Coupon Code For September 2011 For those who are about to place an order from HostGator, here is a chance to take discounts. Yes, i am releasing the coupon code for this month september 2011. Last month, we discussed about the various features supported by HostGator as well as a complete review on HostGator service.......
  • Microsoft Security Bulletin Summary for July 2010 MS10-042 - Vulnerability in Help and SupportCenter Could Allow Remote Code Execution (2229593) "This security update resolves a publicly disclosed vulnerability in the Windows Help and Support Center feature that is delivered with supported editions of Windows XP and Windows Server 2003. This vulnerability could allow remote code execution if......
  • The Harmonica in American History The Harmonica was not originally developed in America, but rather saw the beginning of life in Germany. However, the Harmonica has a rich history in North America, and contributed heavily to the history of music in America as well. Hohner began to manufacture harmonicas in 1857, and shortly after this......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site