Archive for July, 2007

Mozilla patches Windows hole exposed by Firefox

Monday, July 16th, 2007

On the 10th July a patch was checked in for bug 384384 which is a bug that needs both Firefox and IE to be exploited. The command injection vulnerability affected users of Internet Explorer who browsed to a malicious page assuming that they had Firefox installed but not running. Opinions vary as to whether this was a Windows vulnerability or a Firefox one. In my opinion both had some degree of responsibility for this.

(more…)

Posted in IE, Firefox, Security | No Comments »