AplusWebMaster
Topic Starter
FYI…
New vuln found in Mozilla (v.1.7.3)
- http://searchsecurity.techtarget.com/origi…1037799,00.html
"An attacker could use a fresh vulnerability in Mozilla to cause a heap-based buffer overflow and launch malicious code, according to two security organizations. Users are advised to update to version 1.7.5…Secunia said the problem is caused by "a boundary error in the 'MSG_UnEscapeSearchUrl()' function in 'nsNNTPProtocol.cpp' when processing NNTP URIs." This can be exploited by a malicious Web site to cause a heap-based buffer overflow when referencing a specially crafted, overly long "news://" URI, the firm said. A successful attacker could use the exploit to transmit malicious code. The vulnerability has been reported in version 1.7.3 and prior, but is fixed in version 1.7.5.
- http://secunia.com/advisories/13687/
2005-01-03
Solution:
Update to version 1.7.5
>>> http://www.mozilla.org/download/
New vuln found in Mozilla (v.1.7.3)
- http://searchsecurity.techtarget.com/origi…1037799,00.html
"An attacker could use a fresh vulnerability in Mozilla to cause a heap-based buffer overflow and launch malicious code, according to two security organizations. Users are advised to update to version 1.7.5…Secunia said the problem is caused by "a boundary error in the 'MSG_UnEscapeSearchUrl()' function in 'nsNNTPProtocol.cpp' when processing NNTP URIs." This can be exploited by a malicious Web site to cause a heap-based buffer overflow when referencing a specially crafted, overly long "news://" URI, the firm said. A successful attacker could use the exploit to transmit malicious code. The vulnerability has been reported in version 1.7.3 and prior, but is fixed in version 1.7.5.
- http://secunia.com/advisories/13687/
2005-01-03
Solution:
Update to version 1.7.5
>>> http://www.mozilla.org/download/