| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / april, 2005 / Sensitive information disclosed in Firefox and Mozilla 

Sensitive information disclosed in Firefox and Mozilla

Sensitive information disclosed in Firefox and Mozilla

Madrid, April 5, 2005 - A vulnerability has been detected in Mozilla Suite and Firefox that could be exploited by an attacker to access sensitive user data. The problem lies in the JavaScript engine of these applications and can be exploited to access parts of the content of the memory used by the browser, which could contain sensitive user data.

This vulnerability is confirmed in Mozilla 1.7.6 and Firefox 1.0.1 and 1.0.2, although other versions could also be affected.

Until a patch is released, a temporary solution is to disable the JavaScript support, although this preventive measure could affect the functioning of some web pages or may prevent them from being correctly displayed.

More information is available on the developer´s website at https://bugzilla.mozilla.org/show_bug.cgi?id=288688  and on the following websites: http://cubic.xfo.org.ru/index.cgi?read=53004
http://www.securitytracker.com/alerts/2005/Apr/1013635.html
http://secunia.com/advisories/14820/

Oxygen3 24h-365d
by Panda Software

2005-04-07 10:08

Back