Get Smart about Business Spending
Firefox 3 suffers its first vulnerability
According to Tipping Point's Zero Day Initiative, the vulnerability, which it rates as critical, was reported within the first five hours of Firefox 3's release.
"Once the vulnerability was verified in TippingPoint's DVLabs and acquired from the researcher, the vulnerability was promptly reported to the Mozilla security team," said a representative.
Although the Zero Day Initiative team does not offer specifics until the vendor has a chance to patch it, the blog post did say this vulnerability, which also affects Firefox 2, requires user interaction and could result in an attacker executing arbitrary code.
Mozilla is reported to be working on a fix.
The Zero Day Initiative has been criticized in the past for paying researchers who find vulnerabilities.
As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments. 
in the interview the *** mentioned that FF was the most secure browser and they've fixed 15000 issues ..yada yada yada..since this is the same security flaw that's exploitable in FF2, how come it wasn't addressed in the list of fixes?
shame on you!
don't know for sure Lerianis, but a critical vulnerability is not a good start 5hrs in and with 14000 downloads per minute that's an awful lot of people getting software down with flaws in it..see the fire spread :)
It does not matter if the vulnerability was already there. If Firefox 3 is so much better, why didn't it get fixed.
How embarrassing.
(why do the Mac people trash Linux so badly when their OS is based on Linux...?' eh?)
Oh and for the record, Mac OS X is not based on Linux. Please check your facts before submitting such comments.
(why do the Mac people trash Linux so badly when their OS is based on Linux...?' eh?)
FF or IE or whatever, there will be always a FLAW.
software is designed and written by human.
and human ain't perfect and that's the weak link.
one might claim otherwise.
there are people who enemy #1 to Microsoft but you have to thank Microsoft for what computer became today.
true that Microsoft might step on a foot here and there, low punch here and there, but think about it, which company at Microsoft position didn't play the same trick?
and this is true for other industry as well....including politicians.
considering that IE is the top guy, u know there are a lot of people who want to topple it.
yesterday was the first time i checked out FF.
downloaded it.
installed it.
play wth it for a couple hrs.
uninstall it on the same day!!!
FF can't even render the webpage correctly.
FF will always be like Linux.
fun to play with but if u want something productive, it will be always Microsoft.
though, i have to praise the folks at FF and others like Linux and MicroSystem.
without them, Microsoft wouldn't move their big ass to improve their product.
so, competition is good for the consumer.
long live the REVOLUTION!!!!
Most websites are running on free and open source software, not Microsoft IIS. Google uses thousands of Linux servers. MacBooks are the best selling laptops at universities. Productive and Microsoft in the same sentence? Jeez!
"which company at Microsoft position didn't play the same trick?"
Unfortunately true. This is why open standards are so critical, and why Microsoft doesn't like them.
"but you have to thank Microsoft for what computer became today."
I assume you're referring to workstations and personal computers. Slow, inneficient, insecure and buggy? We have Microsoft to thank for that for sure! And don't get me started on how Internet Explorere sucessfully held back the intertubes for such a long time.
And you're saying IE can? Did you see how IE7 did on the Acid3 test? It was quite pathetic. Firefox 3 had decent results
as to open source, you have to look and think further....
do you want 10 different flavors of Linux or Windows or OSX?
and do you think software developer have time and resources to support all the flavors?
not likely.
yes, i agree open source is good for something but not all things.
"Most websites are running on free and open source software, not Microsoft IIS."
true.
but that doesn't mean Santa Clause is real b/c 99% of the kids believe in it.
banks and big business still use IIS.
i personally prefer IIS b/c the PAID product has support and documentations.
now, if the open source has support and doc and easier to develop, i wouldn't hesitate to jump ship.
unfortunately, that's not the case at the present time.
ACID3 test?
does it matter if it fail or pass some schmuck test?
what important to me is my daily workflow and the website i mostly visited.
if FF failed that, i don't care if it passed ACID3 or ACID10.
- by james.grimes June 19, 2008 7:13 AM PDT
- pjhenry1216, I agree. There is just too much of a coincidence there. It seems very fishy.
- Like this Reply to this comment
-
Showing 1 of 2 pages (44 Comments)Kwasiowusu, use a spell checker. And yes, they even have them available for those whom would rather use closed-source Internet Exploder (sorry, I meant Explorer)