AplusWebMaster
Topic Starter
FYI…
- http://www.infoworld.com/article/06/11/02/…tofixbug_1.html
November 02, 2006
"A second minor bug found in the Firefox 2.0 Web browser will be fixed, but users shouldn't encounter much of a problem in the mean time, a Mozilla official said Thursday. The browser will crash if it visits a Web page that been intentionally coded with JavaScript in such a way as to target the bug, said Tristan Nitot, director of European operations for Mozilla. "It's very unlikely that anyone would have put a similar page on any ordinary Web page," so users shouldn't be affected, Nitot said. The problem can't be used to steal data from a computer, he added. It's the second bug that's been found in Firefox 2.0 since its release on Oct. 24. The first bug also causes the browser to hang or crash when a very large document is loaded into an iframe – an HTML (Hypertext Markup Language) element – using JavaScript. The new bug will eventually be fixed. "We will fix it because we need reliability," Nitot said…"
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5633
Last revised: 11/2/2006
"…NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference…"
- http://www.infoworld.com/article/06/11/02/…tofixbug_1.html
November 02, 2006
"A second minor bug found in the Firefox 2.0 Web browser will be fixed, but users shouldn't encounter much of a problem in the mean time, a Mozilla official said Thursday. The browser will crash if it visits a Web page that been intentionally coded with JavaScript in such a way as to target the bug, said Tristan Nitot, director of European operations for Mozilla. "It's very unlikely that anyone would have put a similar page on any ordinary Web page," so users shouldn't be affected, Nitot said. The problem can't be used to steal data from a computer, he added. It's the second bug that's been found in Firefox 2.0 since its release on Oct. 24. The first bug also causes the browser to hang or crash when a very large document is loaded into an iframe – an HTML (Hypertext Markup Language) element – using JavaScript. The new bug will eventually be fixed. "We will fix it because we need reliability," Nitot said…"
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5633
Last revised: 11/2/2006
"…NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference…"