Wednesday, July 25th 2007
![Mozilla Firefox](https://tpucdn.com/images/news/firefox-v1723816949774.png)
Mozilla Admits Firefox Exploit Caused By Firefox
Mozilla Admits Firefox Exploit Caused By IE
Almost three weeks ago Mozilla developers issued a statement indicating that the whole Firefox-Internet Explorer exploit was caused by Internet Explorer which could trick Firefox into executing arbitrary JavaScript code. This morning, Mozilla security chief Window Snyder had to issue a retraction stating Firefox could just as easily trick Firefox into doing the same thing.
Source:
Mozilla
Almost three weeks ago Mozilla developers issued a statement indicating that the whole Firefox-Internet Explorer exploit was caused by Internet Explorer which could trick Firefox into executing arbitrary JavaScript code. This morning, Mozilla security chief Window Snyder had to issue a retraction stating Firefox could just as easily trick Firefox into doing the same thing.
On July 10th, I posted about a security issue in URL protocol handling on Windows. In the previous example, Internet Explorer was the entry point and Firefox was the application receiving the bad data. Over the weekend, we learned about a new scenario that identifies ways that Firefox could also be used as the entry point. While browsing with Firefox, a specially crafted URL could potentially be used to send bad data to another application. We thought this was just a problem with IE. It turns out, it is a problem with Firefox as well. We should have caught this scenario when we fixed the related problem in 2.0.0.5. We believe that defense in depth is the best way to protect people, so we're investigating it now. We are working to make sure that we are giving you as much information about pressing security issues as possible. We make real-time updates as we find out new information because we are committed to an open and transparent security process.
11 Comments on Mozilla Admits Firefox Exploit Caused By Firefox
Ah, just get Opera, then you'll have no problems.
I don't recall bashing your browser here recently? Or did I miss something?
Firefox will fix the problem with the quickness
However, you have elaborated and I apologise if I came off harshly :)
lol, and if I'd only use open source I wouldn't be doing much gaming anymore. Now there's a scary thought. *hugs battlefield 2 box* :p
*level 1 complete* *please write level 2* :laugh: