Firefox plugs drive-by download security holes
Posted: Fri Dec 10, 2010 11:19 pm
http://www.zdnet.com/blog/security/fire ... holes/7828
Sheesh! As much as I like Mozilla I cannot believe their browser is this vulnerable month after month. 11 critical vulnerabilities that didn't even require any user interaction?The open-source Mozilla group has shipped a highly critical Firefox update to patch 13 vulnerabilities that expose Windows and Mac users to hacker attacks.
Some of the vulnerabilities could be exploited to launch drive-by malware downloads or code execution attacks if a user simply surfs to a rigged Web page.
One of the vulnerabilities is a re-patch for an issue that Mozilla initially thought was fixed back in March.
According to Mozilla, 11 of the 13 vulnerabilities are rated “critical,” meaning that they can can be used to run attacker code and install software, “requiring no user interaction beyond normal browsing.”