Re: FIREFOX 3.0 and lower vulnerability
Thanks Dan, keep us posted on the outcome...
--
MEB
http://peoplescounsel.orgfree.com
--
_________
"Dan" <Dan@discussions.microsoft.com> wrote in message
news:C241B07A-73CB-402C-803E-216C4FC7C4C7@microsoft.com...
| The new updated version has not been released yet and I think it should be
| free from the vulnerability because Mozilla pushed the release date back a
| few days and my guess is that the reason was because of this
vulnerability.
| The big problem is that Mozilla Firefox has this highly critical
| vulnerability and it appears the new version of Opera is problematic for
some
| users so that leaves Internet Explorer or some other lesser known browser
for
| users to more safely use. I would caution users to be careful what
browsers
| they download because there are always people out there that will try and
| take advantage of the situation and have browsers that do not work well or
| worse are spyware or malware infested.
|
|
| "MEB" wrote:
|
| > Thanks for the links, but is that version FREE of the vulnerability to
your
| > knowledge?
| >
| > --
| > MEB
| >
http://peoplescounsel.orgfree.com
| > --
| > _________
| >
| > "Dan" <Dan@discussions.microsoft.com> wrote in message
| > news
CA38CC2-D287-4521-B8C4-AF1B7BEFA2F8@microsoft.com...
| > | Here is some information about the vulnerability from secunia ---
| > |
| > |
http://secunia.com/advisories/30761/
| > |
| > | Currently, Firefox users are looking at a July 1, 2008
| > |
| > |
http://wiki.mozilla.org/Releases/Firefox_2.0.0.15
| > |
| > | "MEB" wrote:
| > |
| > | > Ah, okay, but then you do understand that Explorer is the graphical
| > | > interface to {most} of Windows GUI aspects. I see your point though.
| > | > Try using Dependency Walker on IExplore, C:\Program Files\Mozilla
| > | > Firefox\firefox.exe, and a few other programs. Profile them ...
| > | > If your feeling like you want the *big picture*, run filemon and/or
| > regmon
| > | > while you do this activity... after you run through those, open some
of
| > your
| > | > favorite programs also while running filemon/regmon..
| > | >
| > | > So that still doesn't explain your original question. The code
error is
| > in
| > | > Firefox, the vulnerability is fixed if/when that code is fixed. IS
| > Explorer
| > | > vulnerable,, ah I suppose so,,, buuuuuutttttt, not without the
unfixed
| > | > Firefox running which supplies/provides the vulnerability.
| > | >
| > | > --
| > | > MEB
| > | >
http://peoplescounsel.orgfree.com
| > | > --
| > | > _________
| > | >
| > | >
| > | > "Jim" <invalid@example.invalid> wrote in message
| > | > news:uKGXq3n0IHA.552@TK2MSFTNGP06.phx.gbl...
| > | > | If you look at MS Autoruns with MS entries showing and then not.
You
| > will
| > | > | see that the software [*.dll] running the MSIE is Windows
Explorer.
| > The IE
| > | > | is also just a shell.
| > | > | "MEB" <meb@not
here@hotmail.com> wrote in message
| > | > | news:O3vUFon0IHA.5728@TK2MSFTNGP06.phx.gbl...
| > | > | > Not quite sure what the question relates too.. the code for
Firefox
| > is
| > | > | what
| > | > | > makes the vulnerability to attack, no vulnerability in the code,
the
| > | > | attack
| > | > | > point doesn't exist.
| > | > | >
| > | > | > --
| > | > | > MEB
| > | > | >
http://peoplescounsel.orgfree.com
| > | > | > --
| > | > | > _________
| > | > | >
| > | > | > "Jim" <invalid@example.invalid> wrote in message
| > | > | > news:uqq6ypm0IHA.3884@TK2MSFTNGP05.phx.gbl...
| > | > | > | Isn't FFv.x.x a shell technology that rides on top of windows
| > | > explorer?
| > | > | If
| > | > | > | the internet browser is vulnerable, what about explorer?
| > | > | > |
| > | > | > |
| > | > | >
| > | > | >
| > | > |
| > | > |
| > | >
| > | >
| > | >
| >
| >
| >