Catch up on stories from the past week (and beyond) at the Slashdot story archive


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Submission + - Mozilla admits Firefox is flawed just like IE ( 1

jdelator writes: In a public mea culpa, Mozilla Corp.'s chief security officer acknowledged today that Firefox includes the same flaw that the company called a "critical vulnerability" in Internet Explorer during a two-week ruckus over responsibility for a Windows zero-day bug.

"Over the weekend, we learned about a new scenario that identifies ways that Firefox could also be used as the entry point," said Window Snyder of Mozilla. "While browsing with Firefox, a specially crafted URL could potentially be used to send bad data to another application.

"We thought this was just a problem with IE," Snyder continued. "It turns out, it is a problem with Firefox as well."

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Mozilla admits Firefox is flawed just like IE

Comments Filter:
  • In the first instance, it was the fault of both Mozilla and IE - Firefox should validate input passed through other applications. In the second instance, it's Mozilla's and Trillian's; unlike in IE, where the firefoxurl protocol is little used, protocols passing to programs like Trillian are expected - in both IE and Firefox, sites will link to instant messaging, IRC, and other protocols.

Stupidity, like virtue, is its own reward.