GTcarz - Automotive forums for cars & trucks.

GTcarz - Automotive forums for cars & trucks. (https://www.gtcarz.com/)
-   Chit Chat (https://www.gtcarz.com/chit-chat-2/)
-   -   Mozilla warns of Firefox 1.5 flaw (https://www.gtcarz.com/chit-chat-2/mozilla-warns-firefox-1-5-flaw-164194/)

2TONE_93GT 12-14-2005 05:19 AM

Mozilla warns of Firefox 1.5 flaw
 

Mozilla has warned users of a bug in its newest browser, Firefox 1.5 that, after visiting sites with long domain names, could make it seem like their computer has crashed.

The flaw, though, doesn't make users vulnerable to attacks, reckons the open source company, despite issuing a security advisory warning on Sunday.

According to Mozilla, the problem could cause a buffer overflow error but will cause no lasting damage to the application. It also ruled out the possibility of denial-of-service attacks.

The problem, which the company says is very easy to fix, causes pages with very long titles to be processed so slowly by Mozilla that the browser seems to hang every time it is started.

To correct the problem, the offending site must be removed from the browser's history file, or the history folder must be cleared.

They had "issued a security advisory on a temporary start-up unresponsiveness caused by web pages in a browser history with extremely long titles", the company said in a statement. "If a user encounters this problem, the slow start can be fixed by clearing the browser history."

The company found there was no danger of a buffer overflow, which would have made computer's using the browser vulnerable to crashing.

"We can find no basis for claims that variants of this denial-of-service attack can cause an exploitable crash," said the company in its advisory. "There does not appear to be any risk to users or their computers beyond the temporary unresponsiveness at startup."

No release date has been set for a fix.

santro 05-21-2006 01:00 PM

Oh! Thats dangerous. I am currently posting from the same browser!

But I do not visit sites with long domains

razzletang 12-19-2006 05:03 PM

Firefox has a v2 now. Time to upgrade maybe ?


All times are GMT -4. The time now is 03:48 AM.


© 2024 MH Sub I, LLC dba Internet Brands

Page generated in 0.03527 seconds with 5 queries