Tuesday, October 10, 2006

Security on Firefox seems poorer than it should be


The open source web browser Firefox is a mess as far as it's handling of JavaScript is concerned, two hackers revealed on Saturday. Mischa Spiegelmock and Andrew Wbeelsoi said at the ToorCon hacker conference in San Diego that Firefox leaves a computer vulnerable because malicious hackers can takeover by creating a web page containing malicious JavaScript code.Hackers said that the flaw affected FireFox running on Windows, Apple's Mac OS X and Linux. The hackers said the vulnerability was totally due to the use of the decade old scripting language. Spiegelmock said that a decent hacker could implement various programming tricks to cause stack overflow error. The hackers claimed this flaw was impossible to fix unless Mozilla rewrote key sections of the code.

0 Comments:

Post a Comment

<< Home