This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Hackers can grab control of computers by taking advantage of vulnerabilities in both the Mozilla browser suite and the Firefox standalone browser.
Hackers can grab control of computers by taking advantage of vulnerabilities in both the Mozilla browser suite and the Firefox stand-alone browser, a security intelligence firm said Monday.
According to Reston, Va.-based iDefense, Mozilla 1.7.3 and Firefox 1.0 -- and likely all earlier versions as well -- include a "design error" that lets hackers create a memory heap overflow, which then allow remote code execution and a compromise of the system. Even a failed attempt to exploit this flaw could bring down the browser, added iDefense.
Mozilla characterized the problem as "high" on the severity chart, but "low" on risk, in part because it said a successful exploit was dicey. "Creating the exact conditions for exploitation--including running out of memory at just the right moment--is unlikely," Mozilla said in an online security advisory.
There is no patch -- not uncommon with Mozilla browsers -- and instead users are urged to update to the newest versions, which don't include the flaw. Mozilla 1.7.6 and just-released Firefox 1.0.1 are the recommended editions. Both can be downloaded from the Mozilla Foundation Web site.
iDefense has posted details on the vulnerability on its site.
We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
State of the CloudCloud has drastically changed how IT organizations consume and deploy services in the digital age. This research report will delve into public, private and hybrid cloud adoption trends, with a special focus on infrastructure as a service and its role in the enterprise. Find out the challenges organizations are experiencing, and the technologies and strategies they are using to manage and mitigate those challenges today.
Getting Started With Emerging TechnologiesLooking to help your enterprise IT team ease the stress of putting new/emerging technologies such as AI, machine learning and IoT to work for their organizations? There are a few ways to get off on the right foot. In this report we share some expert advice on how to approach some of these seemingly daunting tech challenges.