• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Mozilla Admits Firefox Exploit Caused By Firefox

HellasVagabond

New Member
Joined
Jan 19, 2007
Messages
3,376 (0.54/day)
Location
Athens , GREECE
System Name SECONDARY RIG / PRIMARY RIG / THIRD RIG
Processor i920@3.6GHz / i920@4GHz / AMD Phenom II 955
Motherboard Gigabyte EX58-UD4P / Gigabyte EX58-UD7 / ASRock 890GX3
Cooling CoolIT Domino ALC / Thermalright Silver Arrow / Thermalright VenomousX
Memory 12GB DDR3 @ 1800MHZ / 6GB DDR3 @ 2250MHZ / 4GB DDR3 @ 1600MHZ
Video Card(s) XFX ATI RADEON 5970 / GAINWARD NVIDIA GTX 580 / 2xGEFORCE GTX295
Storage 1550GB / 6TB SAS - SSD / 160GB SSD
Display(s) NEC 26WUXi2 / NEC 3090WQXi / SONY 55A2000 (1080P 55inch)
Case COOLER MASTER HAF 932 / COOLER MASTER ATCS 840 / ANTEC DARKFLEET DF85
Audio Device(s) Soundblaster X-Fi Xtreme Music / SoundBlaster X-Fi Fatal1ty Pro / Realtek Onboard
Power Supply CWT 1200W / Enermax Revolution 85+ 1250W / Ikonik Vulcan 1200W
Software Windows 7 x64 / Windows 7 x64 / Windows 7 x64
Mozilla Admits Firefox Exploit Caused By IE

Almost three weeks ago Mozilla developers issued a statement indicating that the whole Firefox-Internet Explorer exploit was caused by Internet Explorer which could trick Firefox into executing arbitrary JavaScript code. This morning, Mozilla security chief Window Snyder had to issue a retraction stating Firefox could just as easily trick Firefox into doing the same thing.
On July 10th, I posted about a security issue in URL protocol handling on Windows. In the previous example, Internet Explorer was the entry point and Firefox was the application receiving the bad data. Over the weekend, we learned about a new scenario that identifies ways that Firefox could also be used as the entry point. While browsing with Firefox, a specially crafted URL could potentially be used to send bad data to another application. We thought this was just a problem with IE. It turns out, it is a problem with Firefox as well. We should have caught this scenario when we fixed the related problem in 2.0.0.5. We believe that defense in depth is the best way to protect people, so we're investigating it now. We are working to make sure that we are giving you as much information about pressing security issues as possible. We make real-time updates as we find out new information because we are committed to an open and transparent security process.

View at TechPowerUp Main Site
 
Last edited by a moderator:
Joined
May 12, 2006
Messages
491 (0.07/day)
Location
A small crate floating in the Pacific..
Processor Athlon64 X2 3800+ @ 2.6Ghz
Motherboard BioStar TForce4 SLI (939)
Cooling Stock Opteron Heatpipe Cooler
Memory 4x512 Crucial BalistiX, @ DDR520, 2.5-3-3-8
Video Card(s) ATI, x1900 AIW (600/620)
Storage 80GB SATA2, 320GB eSATA2
Display(s) AGM 19" Widescreen LCD, 4ms
Case Aspire X-Dreamer (Black)
Audio Device(s) Auzentech: X-Meridan (Best Soundcard Ever)
Power Supply Rosewill 550W 2x12V
Software XP Professional X64 & Ubuntu 7.10 x86
Oh well, they're quick to fix it and Firefox has always been a solid alternative to Internet Exploder.. err... Explorer. *cough* I have no grudge with Mozilla because of this.
 
Last edited:

Benpi

New Member
Joined
Dec 14, 2006
Messages
415 (0.07/day)
Processor AMD X2 4400+
Memory 2G
Video Card(s) 7950 GX2
Storage 2x 74g 10000rpm Raid:0
Display(s) Dell 1920x1200 widescreen
Software 3dmark06 score: 7650
Alls I gotta say is, booya to all teh MS haters from teh other thread.
 
Joined
Nov 8, 2006
Messages
5,052 (0.79/day)
Location
Manchester, United Kingdom
Processor AMD FX 8320 @ 4GHz
Motherboard Gigabyte GA-990FXA-UD5 rev1
Cooling Corsair H70
Memory 4 x 4GB DDR3 Ripjawz 1600Mhz
Video Card(s) Sapphire Vapor-X AMD R9 280X
Storage 1 x 500GB Samsung Evo 850, 1 x 500GB Vrap Data Drive, 3 x 2TB Seagate, 1 x 1TB Samsung F1
Display(s) 3 x DGM IPS-2402WDH
Case Coolermaster HAF X
Audio Device(s) Onboard
Power Supply Coolermaster 1000W Silent Pro M
Mouse Logitech G502
Keyboard Logitech G510
Software Windows 10 Pro x64
Aww did the average browser finally have to admit it's wrong?

Ah, just get Opera, then you'll have no problems.
 

HellasVagabond

New Member
Joined
Jan 19, 2007
Messages
3,376 (0.54/day)
Location
Athens , GREECE
System Name SECONDARY RIG / PRIMARY RIG / THIRD RIG
Processor i920@3.6GHz / i920@4GHz / AMD Phenom II 955
Motherboard Gigabyte EX58-UD4P / Gigabyte EX58-UD7 / ASRock 890GX3
Cooling CoolIT Domino ALC / Thermalright Silver Arrow / Thermalright VenomousX
Memory 12GB DDR3 @ 1800MHZ / 6GB DDR3 @ 2250MHZ / 4GB DDR3 @ 1600MHZ
Video Card(s) XFX ATI RADEON 5970 / GAINWARD NVIDIA GTX 580 / 2xGEFORCE GTX295
Storage 1550GB / 6TB SAS - SSD / 160GB SSD
Display(s) NEC 26WUXi2 / NEC 3090WQXi / SONY 55A2000 (1080P 55inch)
Case COOLER MASTER HAF 932 / COOLER MASTER ATCS 840 / ANTEC DARKFLEET DF85
Audio Device(s) Soundblaster X-Fi Xtreme Music / SoundBlaster X-Fi Fatal1ty Pro / Realtek Onboard
Power Supply CWT 1200W / Enermax Revolution 85+ 1250W / Ikonik Vulcan 1200W
Software Windows 7 x64 / Windows 7 x64 / Windows 7 x64
Well much like Cisco which blamed Apple for the mess at Duke Uni , Mozilla rushed to blame Microsoft....In both cases the allegations boomeranged back....People never learn.
 
Joined
May 12, 2006
Messages
491 (0.07/day)
Location
A small crate floating in the Pacific..
Processor Athlon64 X2 3800+ @ 2.6Ghz
Motherboard BioStar TForce4 SLI (939)
Cooling Stock Opteron Heatpipe Cooler
Memory 4x512 Crucial BalistiX, @ DDR520, 2.5-3-3-8
Video Card(s) ATI, x1900 AIW (600/620)
Storage 80GB SATA2, 320GB eSATA2
Display(s) AGM 19" Widescreen LCD, 4ms
Case Aspire X-Dreamer (Black)
Audio Device(s) Auzentech: X-Meridan (Best Soundcard Ever)
Power Supply Rosewill 550W 2x12V
Software XP Professional X64 & Ubuntu 7.10 x86
Aww did the average browser finally have to admit it's wrong?

Ah, just get Opera, then you'll have no problems.

If Opera goes Opensource.. I'll consider it.
 
Joined
Nov 8, 2006
Messages
5,052 (0.79/day)
Location
Manchester, United Kingdom
Processor AMD FX 8320 @ 4GHz
Motherboard Gigabyte GA-990FXA-UD5 rev1
Cooling Corsair H70
Memory 4 x 4GB DDR3 Ripjawz 1600Mhz
Video Card(s) Sapphire Vapor-X AMD R9 280X
Storage 1 x 500GB Samsung Evo 850, 1 x 500GB Vrap Data Drive, 3 x 2TB Seagate, 1 x 1TB Samsung F1
Display(s) 3 x DGM IPS-2402WDH
Case Coolermaster HAF X
Audio Device(s) Onboard
Power Supply Coolermaster 1000W Silent Pro M
Mouse Logitech G502
Keyboard Logitech G510
Software Windows 10 Pro x64
Well that's a pretty close-minded view....it's free, it's faster, more stable, uses less memory and more secure....but it's not open-source...so that makes it bad?....
 
Joined
May 12, 2006
Messages
491 (0.07/day)
Location
A small crate floating in the Pacific..
Processor Athlon64 X2 3800+ @ 2.6Ghz
Motherboard BioStar TForce4 SLI (939)
Cooling Stock Opteron Heatpipe Cooler
Memory 4x512 Crucial BalistiX, @ DDR520, 2.5-3-3-8
Video Card(s) ATI, x1900 AIW (600/620)
Storage 80GB SATA2, 320GB eSATA2
Display(s) AGM 19" Widescreen LCD, 4ms
Case Aspire X-Dreamer (Black)
Audio Device(s) Auzentech: X-Meridan (Best Soundcard Ever)
Power Supply Rosewill 550W 2x12V
Software XP Professional X64 & Ubuntu 7.10 x86
Well that's a pretty close-minded view....it's free, it's faster, more stable, uses less memory and more secure....but it's not open-source...so that makes it bad?....

Hmm.. slightly faster page loads, only decently better hard start if I don't choose to load Firefox resources on startup. I've used Opera version 8 and 9, and I don't like the GUI and I simply prefer software that is community development oriented.

I don't recall bashing your browser here recently? Or did I miss something?
 
Last edited:

WarEagleAU

Bird of Prey
Joined
Jul 9, 2006
Messages
10,812 (1.66/day)
Location
Gurley, AL
System Name Pandemic 2020
Processor AMD Ryzen 5 "Gen 2" 2600X
Motherboard AsRock X470 Killer Promontory
Cooling CoolerMaster 240 RGB Master Cooler (Newegg Eggxpert)
Memory 32 GB Geil EVO Portenza DDR4 3200 MHz
Video Card(s) ASUS Radeon RX 580 DirectX 12 DUAL-RX580-O8G 8GB 256-Bit GDDR5 HDCP Ready CrossFireX Support Video C
Storage WD 250 M.2, Corsair P500 M.2, OCZ Trion 500, WD Black 1TB, Assorted others.
Display(s) ASUS MG24UQ Gaming Monitor - 23.6" 4K UHD (3840x2160) , IPS, Adaptive Sync, DisplayWidget
Case Fractal Define R6 C
Audio Device(s) Realtek 5.1 Onboard
Power Supply Corsair RMX 850 Platinum PSU (Newegg Eggxpert)
Mouse Razer Death Adder
Keyboard Corsair K95 Mechanical & Corsair K65 Wired, Wireless, Bluetooth)
Software Windows 10 Pro x64
Opera is a great browser. Speedy and quick and what not. Its not popularly supported by high security websites though.


Firefox will fix the problem with the quickness
 
Joined
Nov 8, 2006
Messages
5,052 (0.79/day)
Location
Manchester, United Kingdom
Processor AMD FX 8320 @ 4GHz
Motherboard Gigabyte GA-990FXA-UD5 rev1
Cooling Corsair H70
Memory 4 x 4GB DDR3 Ripjawz 1600Mhz
Video Card(s) Sapphire Vapor-X AMD R9 280X
Storage 1 x 500GB Samsung Evo 850, 1 x 500GB Vrap Data Drive, 3 x 2TB Seagate, 1 x 1TB Samsung F1
Display(s) 3 x DGM IPS-2402WDH
Case Coolermaster HAF X
Audio Device(s) Onboard
Power Supply Coolermaster 1000W Silent Pro M
Mouse Logitech G502
Keyboard Logitech G510
Software Windows 10 Pro x64
Hmm.. slightly faster page loads, only decently better hard start if I don't choose to load Firefox resources on startup. I've used Opera version 8 and 9, and I don't like the GUI and I simply prefer software that is community development oriented.

I don't recall bashing your browser here recently? Or did I miss something?

I was not bashing your browser, what I didn't like was that you said "If Opera goes open-source..I'll consider it" as if to say that anything that isn't Open-Source is bad and evil. You didn't elaborate and hence it came off like you were bashing everything that wasn't open-source.

However, you have elaborated and I apologise if I came off harshly :)
 
Joined
May 12, 2006
Messages
491 (0.07/day)
Location
A small crate floating in the Pacific..
Processor Athlon64 X2 3800+ @ 2.6Ghz
Motherboard BioStar TForce4 SLI (939)
Cooling Stock Opteron Heatpipe Cooler
Memory 4x512 Crucial BalistiX, @ DDR520, 2.5-3-3-8
Video Card(s) ATI, x1900 AIW (600/620)
Storage 80GB SATA2, 320GB eSATA2
Display(s) AGM 19" Widescreen LCD, 4ms
Case Aspire X-Dreamer (Black)
Audio Device(s) Auzentech: X-Meridan (Best Soundcard Ever)
Power Supply Rosewill 550W 2x12V
Software XP Professional X64 & Ubuntu 7.10 x86
I was not bashing your browser, what I didn't like was that you said "If Opera goes open-source..I'll consider it" as if to say that anything that isn't Open-Source is bad and evil. You didn't elaborate and hence it came off like you were bashing everything that wasn't open-source.

However, you have elaborated and I apologise if I came off harshly :)

Sorry for the miss communication then...

lol, and if I'd only use open source I wouldn't be doing much gaming anymore. Now there's a scary thought. *hugs battlefield 2 box* :p
 
Joined
Nov 8, 2006
Messages
5,052 (0.79/day)
Location
Manchester, United Kingdom
Processor AMD FX 8320 @ 4GHz
Motherboard Gigabyte GA-990FXA-UD5 rev1
Cooling Corsair H70
Memory 4 x 4GB DDR3 Ripjawz 1600Mhz
Video Card(s) Sapphire Vapor-X AMD R9 280X
Storage 1 x 500GB Samsung Evo 850, 1 x 500GB Vrap Data Drive, 3 x 2TB Seagate, 1 x 1TB Samsung F1
Display(s) 3 x DGM IPS-2402WDH
Case Coolermaster HAF X
Audio Device(s) Onboard
Power Supply Coolermaster 1000W Silent Pro M
Mouse Logitech G502
Keyboard Logitech G510
Software Windows 10 Pro x64
Sorry for the miss communication then...

lol, and if I'd only use open source I wouldn't be doing much gaming anymore. Now there's a scary thought. *hugs battlefield 2 box* :p

Hmmm....open-source gaming....

*level 1 complete* *please write level 2* :laugh:
 
Top