Netscape 7.2 Ready for August Release - ' Page 2 ' (
Page 2 of 2 )
Meanwhile, Mozilla said this week that it is working to fix two security vulnerabilities that affects all of its Web browsers, both its namesake suite and the stand-alone Firefox browser. Both vulnerabilities relate to the handling of security certificates, said Chris Hofmann, director of engineering for the Mountain View, Calif., foundation.
Mozilla earlier this month patched a separate browser security issue. Click here to read more.
The first vulnerability could allow an attacker to point a user to a malicious Web site where the content appears similar to a trusted site, such as a bank site, while using the security certificate from the trusted site, Hofmann said. It could give users a false sense of security.
The second problem could entice a user to accept a malicious certificate that would corrupt a users other certificates, Hofmann said.
Hofmann said he knows of no active exploits of the vulnerabilities, and security researchers have rated the flaws as moderate risks.
"Were just trying to stay ahead," Hofmann said. "A number of small issues can pile up and be used to construct a more extensive exploit."
Mozilla plans to issue a fix next week for the security flaws, either by issuing updates for both browsers or by releasing a security patch, Hofmann said.
eWEEK Labs Jim Rapoza says Mozilla is thriving in its comeback. Read why.
Netscape 7.2 would presumably incorporate the fixes as well, but neither Mozilla nor AOL officials could confirm whether the updated Netscape browser would include the security patches.
Check out eWEEK.coms Enterprise Applications Center at http://enterpriseapps.eweek.com for the latest news, reviews and analysis about productivity and business solutions.
Be sure to add our eWEEK.com enterprise applications news feed to your RSS newsreader or My Yahoo page
Enterprise Applications 
