Beware FIREFOX users, check the news.

Status
Not open for further replies.

firewall

In the zone
Details have been released about several vulnerabilities in Mozilla Firefox. These can potentially be exploited to detect the presence of local files, cause a DoS (Denial of Service), disclose sensitive information, spoof the file download dialog, and gain escalated privileges.

1) Web sites may include images from local resources, which can be exploited to determine the existence of local images, cause a DoS by referencing device files (e.g. "/dev/tty0"), and potentially steal passwords from Windows systems via file shares.

2) The file download dialog box truncates filenames, which potentially can be exploited to spoof file extensions in the file download dialog.

This is a variant of:
SA10760 *secunia.com/advisories/10760/

3) On Mac OS X, Firefox is installed with world-writable permissions, which potentially can be exploited by malicious, local users to gain escalated privileges.


Solution:
Update to version 1.0.
*www.mozilla.org/products/firefox/


Provided and/or discovered by:
1) Wolfgang Schwarz
2) Gabriel Cabillón


Original Advisory:
1) *bugzilla.mozilla.org/show_bug.cgi?id=69070
2) *bugzilla.mozilla.org/show_bug.cgi?id=234416
3) *bugzilla.mozilla.org/show_bug.cgi?id=261527


Other References:
SA10760:
*secunia.com/advisories/10760/

*secunia.com/advisories/13144/

---------------

:)
 
OP
firewall

firewall

In the zone
well, phpbb uses some special codes for formatiing texts, like as you know quote, url, etc. the phpbb extension for firefox adds a context menu for easy access to thes BBcodes .

:)
 

sreevirus

Certified Nutz
I have installed the extension but I cannot find any option on the context menu...???
hope this image helps u understand how the extension can help:
*img.photobucket.com/albums/v242/sreevirus/bbcode.jpg

right now, i just copied what u wrote and then pasted it as quote.....
likewise, i dont require to type everything in [ ] [/ ]
 

NikhilVerma

Padawan
I don't get this on my right click menu...
I am using Windows ME with Firefox 1.0 ...Wierd!!!

And there is no webdeveloper option too...
And wy don't you have other options like
* View Background Image
* View Page Info
* View Page source
* Bookmark this page
* Save page as

etc.etc.

On you right click menu??
 

alib_i

Cyborg Agent
nikhil ..
right click on a text box ... u'll see the 'undo cut copy paste delete' and along with that u'll have BBCode menu

all those options u said come when u right click on the page ( not over a text box )
 

sreevirus

Certified Nutz
nikhil,
the BBcode options can only be accessed when u right click on a text box space...and other options appear when u click at the appropriate places (as alib_i mentioned)...
see these pix:

1. here, i rt clicked on a blank space:
*img.photobucket.com/albums/v242/sreevirus/ff1.jpg

2. Here, i rt clicked on a hyperlink:
*img.photobucket.com/albums/v242/sreevirus/ff2.jpg

3. Here, i ct clicked on a hyperlink on an image:
*img.photobucket.com/albums/v242/sreevirus/ff3.jpg
 
Status
Not open for further replies.
Top Bottom