Feeds

Firefox sweeps away carpet bombing bug

Updates fix several vulns

Security for virtualized datacentres

Mozilla has plugged two critical security holes in versions 2 and 3 of Firefox.

Version 2.0.0.16 fixes a code injection risk involving vulnerabilities in its CSS reference counter, and a flaw in handling command-line URLs that means multiple tabs can be launched when Firefox is not running. The first flaw also affects the Thunderbird email clients when JavaScript is enabled for email reading. Such a set-up is generally a bad idea.

The second flaw allows multiple tabs to be launched in Firefox even when it's not open. This is an attack vector for the Mozilla side of a blended threat ariseing when Apple's Safari browser is installed on the same systems as either Internet Explorer or Firefox. Dubbed the "carpet bombing" bug, this was disclosed by independent researcher Billy Rios in May and patched by Apple - after some foot-dragging - in June.

Mozilla has also released a stability and security upgrade for the latest version of its browser. Firefox 3.0.1 includes fixes for the same two bugs that affect the earlier version of the browser, as well as a fix for a bug specific to version 3 which means malformed GIF files pose a code injection risk to Mac OS X systems running the latest version of the browser.

Firefox 3.0.1 - the first upgrade to the latest version of Mozilla's flagship browser software - came out on Wednesday, a day after the version 2 update. Support for version 2 ends in mid-December. ®

Beginner's guide to SSL certificates

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.