Firefox 1.0.4 / Mozilla 1.7.8 Vuln

FYI…

- http://secunia.com/advisories/15601/
Release Date: 2005-06-06
Critical: Moderately critical
Impact: Spoofing
Where: From remote
Solution Status: Unpatched …

Description:
A seven year old vulnerability has been re-introduced in Mozilla and Firefox, which can be exploited by malicious people to spoof the contents of web sites… Secunia has constructed a test, which can be used to check if your browser is affected:
- http://secunia.com/multiple_browsers_frame…erability_test/

The vulnerability has been confirmed in Firefox 1.0.4 and Mozilla 1.7.8. Other versions may also be affected.

Solution:
Do not browse untrusted web sites while browsing trusted sites…"

FYI…

- http://forums.mozillazine.org/viewtopic.php?t=276111
Posted: Jun Mon 6th 2005 11:05am
"…To protect yourself, close all other windows/tabs before accessing a site where you routinely put in a secure password (eg your bank or paypal account), or your bank or credit card details (eg Amazon), or other sensitive data. If you use one of the tabbed browsing extensions and can set it to always open links in new tabs, never in a new window, this also prevents the vulnerability from being exploited…"

FYI…

- http://www.techweb.com/wire/security/164301545
June 08, 2005
"…Although Mozilla recommended a work-around – closing all other windows and tabs before accessing a site where a critical password is entered – developers noted that users who had installed the Tab Mix extension ( https://addons.mozilla.org/extensions/morei…=firefox&id;=625 ) to Firefox were protected from any exploit…"