Slashdot stories can be listened to in audio form via an RSS feed, as read by our own robotic overlord.

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×
Mozilla

+ - serious flaw in Firefox 2.0 and Opera 9.1

Submitted by
crazylittlebear
crazylittlebear writes "Firefox 2.0 and Opera 9.1 have serious bug, which allows to read disc data (e.g. directory listing, contents of text files) from any computer. If you download HTML file do disc and open it from your computer, with JavaScript turned on, your disc can be scanned by someone else. As described on http://bragoszewski.com/?page_id=36, the flaw is not present in Internet Explorer 6 or 7. It is not only possible to send a file o directory listing from computer. The exploit or backdoor that uses this bug is extremely easy to write. With more complicated code an attacker can establish a full connection to a computer and can browse victim's disc nearly as easy as with local file manager..."

"Everyone's head is a cheap movie show." -- Jeff G. Bone

Working...