DIGIT-ARC read-only archive · snapshot: July 23, 2026

Extremely critical Firefox flaws

4 posts · originally from https://geek.digit.in/community/threads/extremely-critical-firefox-flaws.9490/

rajat22
rajat22 Original post #1
May 10, 2005 at 11:48 AM
Extremely critical Firefox flaws

Courtsey *www.techspot.com/
Proving that its not just IE that holds the monopoly in serious security

problems, two new vulnerabilities in Mozilla's Firefox Web browser have been

rated "extremely critical." Seemingly, the vulnerabilities have the potential to

allow an attacker to take control of a PC simply by getting a user to visit a

malicious Web site.

Because proof-of-concept code has been leaked -- as were the

vulnerabilities -- before a patch was ready, Mozilla recommended that Firefox

users either disable JavaScript or lock down the browser so it doesn't install

additional software, such as extensions or themes, from Web sites.

The vulnerabilities were discovered by a pair of security researchers, who

had notified Mozilla earlier in the month, but were keeping mum until a patch

was written. However, details of the vulnerabilities were leaked by someone

close to one of the researchers.

It appears that it is possible to trick the browser into thinking a download is

coming from one of the by-default sites permitted to install software

automatically: addons.mozilla.org or update.mozilla.org. Changes have been

made to the Mozilla update site to try to minimise any potential for damage,

however the problem will not be fixed properly until we are given Firefox 1.0.4.
Read more

*www.techweb.com/wire/security/163100258
mario_pant
May 10, 2005 at 1:56 PM
hey this can be serious..... but mostly.... the firefox users only use trusted sites and are already concious for security... that is why they sownloaded or got firefox in the first place.... anyways thnx. for the info...... *waiting for the patch*
I
May 12, 2005 at 11:56 AM
mario_pant said:
but mostly.... the firefox users only use trusted sites and are already concious for security

:?: :?: You are assuming too much buddy.

Anyway I'm sure, the flaws will be removed soon.
rohanbee
May 12, 2005 at 1:30 PM
Incinerator said:
mario_pant said:
but mostly.... the firefox users only use trusted sites and are already concious for security

:?: :?: You are assuming too much buddy.

Anyway I'm sure, the flaws will be removed soon.

Really hope that the flaws are ironed out am a big fan of firefox. Maybe microsoft wants to send out rumours through its networks?? u never know these things.