AplusWebMaster
Topic Starter
FYI…
- http://www.techweb.com/wire/security/166401130
July 20, 2005
"…A vulnerability in the popular Greasemonkey extension to Mozilla's Firefox browser is so serious, said its developer, that users should either immediately uninstall the add-on or replace it with a neutered version. Greasemonkey is an extension to Firefox that lets users change parts of a Web site with small bits of JavaScript. Hundreds of scripts exist… The bug could let a malicious Web site read any local file on a Greasemonkey user's machine, or view the contents of all local drive directories, said Aaron Boodman, Greasemonkey's creator, on his blog. "I'm working feverishly on a fix for this," said Boodman. "But [it] will take several days. In the meantime, I strongly recommend that everyone either install Greasemonkey 0.3.5, or else disable or uninstall Greasemonkey completely." Greasemonkey 0.3.5 is a "neutered" version, added Boodman, that isn't open to exploit…"
- http://greaseblog.blogspot.com/2005/07/man…key-update.html
Greasemonkey 0.3.5
>>> http://atrus.org/hosted/greasemonkey-0.3.5.xpi

- http://www.techweb.com/wire/security/166401130
July 20, 2005
"…A vulnerability in the popular Greasemonkey extension to Mozilla's Firefox browser is so serious, said its developer, that users should either immediately uninstall the add-on or replace it with a neutered version. Greasemonkey is an extension to Firefox that lets users change parts of a Web site with small bits of JavaScript. Hundreds of scripts exist… The bug could let a malicious Web site read any local file on a Greasemonkey user's machine, or view the contents of all local drive directories, said Aaron Boodman, Greasemonkey's creator, on his blog. "I'm working feverishly on a fix for this," said Boodman. "But [it] will take several days. In the meantime, I strongly recommend that everyone either install Greasemonkey 0.3.5, or else disable or uninstall Greasemonkey completely." Greasemonkey 0.3.5 is a "neutered" version, added Boodman, that isn't open to exploit…"
- http://greaseblog.blogspot.com/2005/07/man…key-update.html
Greasemonkey 0.3.5
>>> http://atrus.org/hosted/greasemonkey-0.3.5.xpi