According to Tipping Point's Zero Day Initiative, the vulnerability, which it rates as critical, was reported within the first five hours of Firefox 3's release.
"Once the vulnerability was verified in TippingPoint's DVLabs and acquired from the researcher, the vulnerability was promptly reported to the Mozilla security team," said a representative.
Although the Zero Day Initiative team does not offer specifics until the vendor has a chance to patch it, the blog post did say this vulnerability, which also affects Firefox 2, requires … Read more
On Thursday, Zero Day Initiative announced four flaws affecting two instant-messaging applications, three affecting Cerulean Studios Trillian Pro, and one affecting IBM Lotus Sametime. Zero Day Initiative is a part of TippingPoint and is controversial in that it pays researchers for finding flaws.
The first flaw in Trillian affects the header parsing code for the msn protocol and could allow remote attackers to execute arbitrary code. The advisory states "when processing the X-MMS-IM-FORMAT header, certain attributes are copied into a buffer located on the stack without any length verification which can eventually lead to code execution with the privileges … Read more
In a way, this story is left over from CES 2008, where I attended a blogger party hosted by the Parnassus Group and sponsored by, among other companies, Virgin America, the US domestic airline counterpart to Virgin Atlantic.
The party was a lot of fun, and all the sponsors did extensive giveaways. I got a flight suit from Intel and Zero G, a private company that offers "weightless" (parabolic trajectory) flights. Alas, I didn't win a Zero G flight, but I did win a free flight on Virgin America. In fact, I think pretty much everyone at … Read more
What does an Internet service provider have in common with a florist?
Seemingly not much. But United Online, which owns dial-up Internet service provider NetZero, said Wednesday that it's spending $456 million to buy FTD Group, the floral and specialty gift provider.
I don't think I'm alone in thinking this seems like an odd pairing. FTD is one of the largest floral companies in the world, providing products to consumers as well as retail florists throughout the U.S., Canada, U.K., and Ireland. But United Online, which owns Internet properties such as Classmates.com, Juno, NetZero, … Read more
A new contest to be held at this year's DefCon in Las Vegas in August hopes to prove that signature-based antivirus is dead, a move that one leading antivirus researcher says is "not a good idea."
The goal of the Race to Zero is simple: obfuscate a malicious code so that it evades well-known antivirus engines.
Contestants will be given a sample set of viruses and malicious code that they must modify and then upload through the contest portal. Once accepted, the sample will be sent through a number of leading antivirus engines (perhaps using VirusTotal.com … Read more
With Earth Day upon us, CNET News.com's green reporters sat down and selected five leading companies in five different clean-technology categories. Here are the transportation companies selected:
1. A123 Systems: Like a number of other companies, A123 wants to sell lithium-ion battery packs for electric cars and plug-in hybrids. The difference is that A123, which spun out of MIT, has influential friends. General Motors invested in the company and is testing A123 batteries for its hybrids, including the Chevy Volt expected in 2010. So is Norway's Think, which makes an electric town car. In all, the company … Read more
If you thought only cockroaches would survive a nuclear holocaust, here's something else to add to the rarefied list--Zenith's Defy Xtreme Zero-G Watch. Its makers have apparently imbued this timepiece with the powers of Superman since it not only defies gravity (being accurate even in extreme gravity), but it's also waterproof down to 1,000 feet. You can read about the technology behind this feat at the Web site. Did we mention it costs $500,000? Yes, that's five zeros.
As for bodywork, it's armored in a blackened titanium body, with a titanium strap sporting … Read more
A company named Zero Pollution Motors says it plans to bring a car powered by air to the U.S. sometime in 2009 or 2010. The six pistons in the Air Car's engine are pushed by compressed air rather than gasoline combustion, an idea developed by F1 race car engineer Guy Negre. The car carries a compressor, making it possible to fill its compressed air tank by plugging it into an electrical outlet. At low speeds, the engine is cranked solely by air from the tank. At high speeds, it uses gasoline to heat a chamber, giving the air … Read more
I've always preferred prognostication to nostalgia, so rather than replay the best of 2007, I'll use these late December doldrums to make 10 predictions for the coming year. Some editors will warn you that this kind of list is suicide--it's too easy for everybody to look back a year later and see where you were wrong--but it hasn't hurt Cringely, so here goes. In no particular order.