Mozilla Admit Firefox Holds Same Security Flaw as Internet Explorer
Filed under: Computers | By: Ryan
Posted on: July 25, 2007 | No Comments

The chief security officer from Mozilla says Firefox has the same flaw as IE, ironically called a ‘critical vulnerability’ by Mozilla themselves recently. Fear not however, firefox users, as a patch is in the works as we speak.
“Over the weekend, we learned about a new scenario that identifies ways that Firefox could also be used as the entry point,” said Window Snyder of Mozilla. “While browsing with Firefox, a specially crafted URL could potentially be used to send bad data to another application.
“We thought this was just a problem with IE,” Snyder continued. “It turns out, it is a problem with Firefox as well.”
Jesper Johansson, a former Microsoft security strategist put the point accross as to how Firefox was just as guilty as IE in terms of failing to validate input.
Johansson openly showed how passes potentially harmful, malicious URLs to other applications. He went on to say: “Firefox is subject to the exact same flaw that they blame on IE. Firefox also does not escape quotes in URLs before it passes them on to protocol handlers,”.
Mozilla may think twice before they point the finger at IE and sit back next time.
Internet Explorer or Mozilla Firefox? Or what about Safari? You decide.
Source
CLICK HERE to keep updated with the latest news, share a comment or problems with products and services. Follow us on twitter or read more news.

Comments