Computer code that demonstrates how a known flaw in an older version of the browsers can be exploited in a potentially crippling attack was published on the Web over the weekend. The vulnerability was fixed in Firefox 1.0.5,, and in Mozilla Suite 1.7.9, according to Mozilla.
The code was published by Aviv Raff, a developer in Israel. "I think it's been enough time for people to upgrade from v1.0.4 of Firefox," he wrote on his blog Sunday. Raff's code doesn't do much harm, but he notes that it would be easy to turn it into malicious code that commandeers a vulnerable system.
Mozilla has released several updates to both Firefox and the Mozilla Suite since July. The latest version of Firefox is 1.5, it is a minor problem.. A security vulnerability that could has already been pinpointed in that version, but Mozilla says
In other browser news, Microsoft on Tuesday released. The software maker deems two of the flaws "critical." One is already being used to attack IE users, Microsoft said in a bulletin.
Secunia is warning of a security flaw in version 8.01 of the in an alert Tuesday. The flaw lies in the way the browser handles mouse clicks in new windows and in how it displays a dialog box for downloads, according to Secunia's advisory.. Earlier versions may also be affected, the security monitoring company said
The Opera flaw could be exploited to trick people into downloading malicious programs, Secunia said. The company advised people to upgrade to Opera 8.0.2, which has been available since late July. Several other releases have since followed.