Another Firefox Vulnerability Reported

Elizabeth

From Secunia, a seven year old browser bug has resurfaced:
http://secunia.com/advisories/15601/

And a test to see if you are vulnerable (which I was, interestingly enough):
http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/

planetsim

Doesnt appear to affect 1.0.4

Also vBulletin is stuffing the Link Up, by adding the line break tag and a space in the URL.

Jason_Batten

Internet Explorer && phpBB2 😃

planetsim

Originally posted by NetNerd85
Internet Explorer && phpBB2 😃

Hmm..

Internet Explorer
http://secunia.com/product/11/ (20 out of 81 and on highly critical)
Firefox
http://secunia.com/product/4227 (5 out of 18)

So who are you going to take your chances with?

As well as Im currently using PHPBB2 its quite a mess and bug riddled. Which reminds me I should upgrade.

Jason_Batten

I'm not parranoid :bemused:

I just like the IE logo better 😃

Orange, boo! *strokes his fox fur coat

Weedpacket

Originally posted by planetsim
Doesnt appear to affect 1.0.4

Ditto.

Elizabeth

weird, I'm running 1.0.4 and got me... weird. I'll have to look into that. :glare:

goldbug

Originally posted by Elizabeth
weird, I'm running 1.0.4 and got me... weird. I'll have to look into that. :glare:

It got me as well. 1.0.4 running on OS X 10.3.9

Doesn't seem to affect Safari tho (obviously) 😃

dalecosp

Mozilla 1.7.7
Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.7) Gecko/20050428

Oh, well ... it was over a month old, anyway 😃

Weedpacket

Originally posted by Elizabeth
weird, I'm running 1.0.4 and got me... weird. I'll have to look into that. :glare:

Here's a possibility: are either you or planetsim using the tabbrowser extension? (I guess planetsim will have to answer part of that question.)

I am, and it's configured to open "unresized popups" in tabs; that's where the erstwhile hijacking page opened for me, so I'm guessing it grabbed the event and moved it away from its intended target.

planetsim

Yea I it configured to open new windows in tabs. When opening it in a window Im affected. So unless you new Window you should be fine.

goldbug

Originally posted by goldbug
It got me as well. 1.0.4 running on OS X 10.3.9

No tabbrowser extensions here. (Only WebDev, Adblock, Tidy, Checky, GreaseMonkey)