Últimas notícias

Principais artigos

Hover to load posts
Recursos

Centrais de recursos

Confident Compliance Starts Here Always-On Tax Compliance For a Changing World The Future of Corporate Payments Powering Enterprise Data Resilience Bring AI to Your Data Videos Partner Content

Recursos em destaque

Link to The Real AI Power Play: Who Controls Your Enterprise Data Layer?

The Real AI Power Play: Who Controls Your Enterprise Data Layer?

IT and data teams were promised that AI would make work easier. Instead, it's created new layers of complexity.

Link to Building the Backbone of Agentic AI with Trusted, Context-Rich Data

Building the Backbone of Agentic AI with Trusted, Context-Rich Data

In this 10-minute take video, Reltio Principal Solutions Consultant Guy Vorster explains how organizations can overcome fragmented data challenges to power AI agents.

Link to IHG scales real-time, trusted data across global brands

IHG scales real-time, trusted data across global brands

Accelerating time to value while powering data-driven engagement
Inteligência artificial

Principais artigos

Hover to load posts
Vídeo

Principais vídeos

Hover to load posts
Big Data e análise

Principais artigos

Hover to load posts
Nuvem

Principais artigos

Hover to load posts
Redes

Principais artigos

Hover to load posts
Cibersegurança Cibersegurança
Aplicativos Aplicativos
Gestão de TI Gestão de TI
Armazenamento Armazenamento
Mobile Mobile
Pequenas empresas Pequenas empresas
Desenvolvimento Desenvolvimento
Banco de dados Banco de dados
Servidores Servidores
Android Android
Apple Apple
Inovação Inovação
Hardware de PC Hardware de PC
Avaliações Avaliações
Mecanismos de busca Mecanismos de busca
Virtualização Virtualização
Blogs Blogs
Eventos Eventos

JavaScript Hole Found in Firefox, SeaMonkey

Escrito por

Published: Mar 7, 2007

Updated: Feb 2, 2021

1 minute read

eWeek mantém conteúdo e recomendações de produtos editorialmente independentes. Podemos ganhar dinheiro quando você clica em links de nossos parceiros. Saiba mais

The Mozilla Foundation reported on Monday that a critical JavaScript bug in the Firefox browser and in the SeaMonkey Internet application suite could allow a malicious Web site to inject arbitrary code into a vulnerable PC.

The bug was inadvertently brought into being by an earlier fix that came out in December 2006. That fix regressed the code so that the applications now allow Web scripts to execute arbitrary code by setting the src attribute of an IMG tag to a specially crafted JavaScript: URI.

Disabling JavaScript won’t save you, since the regression also causes the URIs in IMG tags to execute even if JavaScript execution has been disabled in preferences.

The Thunderbird e-mail client isn’t affected by the flaw. Affected versions are Firefox 1.5.0.9/2.0.0.1 and SeaMonkey 1.0.7.

Mozilla has a fix out and is recommending that users upgrade. The Firefox upgrade is here, and the SeaMonkey upgrade is here.

Lisa Vaas

Content Writer

Lisa Vaas is News Editor/Operations for eWEEK.com and also serves as editor of the Database topic center. She has focused on customer relationship management technology, IT salaries and careers, effects of the H1-B visa on the technology workforce, wireless technology, security, and, most recently, databases and the technologies that touch upon them. Her articles have appeared in eWEEK's print edition, on eWEEK.com, and in the startup IT magazine PC Connection.

Recomendado para você...

Cibersegurança

Firefox, Thunderbird, SeaMonkey Get a Security Overhaul

The Mozilla Foundation has released security updates to fix multiple flaws that could result in system hijacking in its open-source Firefox browser, Thunderbird e-mail client and SeaMonkey Internet applications suite. The bugs, deemed critical, are detailed in Mozillas Security Advisory 2007-12. They include multiple vulnerabilities in Mozillas Layout Engine and in its JavaScript engine that […]

Lisa Vaas

Jun 1, 2007

Cibersegurança

Firefox Patch on the Way for JavaScript Engine Flaw

The Mozilla Foundation plans to release a new version of its flagship Firefox browser as early as this weekend to patch a known JavaScript Engine flaw. The flaw, which puts users at risk of information disclosure attacks, already has been fixed in nightly builds, and volunteers at the foundation said a final release on Firefox […]

Ryan Naraine

Apr 8, 2005

Cibersegurança

Mozilla Fixes Highly Critical Firefox, Thunderbird Flaws

Mozillas Firefox browser has been updated to fix 13 security vulnerabilities, five rated critical. The open-source group on June 1 shipped Firefox 1.5.0.4, a security and stability release to correct flaws that could cause security bypass, cross-site scripting, system access and HTTP response-smuggling attacks. Security alerts aggregator Secunia rates the update as “highly critical” because […]

Ryan Naraine

Jun 2, 2006

Cibersegurança

Mozilla Plugs Thunderbird Security Hole

Mozilla is certainly having a nightmarish security week. Late June 4, it released a security-fix Version 1.5.0.12 of its Thunderbird e-mail client, after updating its Firefox browser, a Firefox Google toolbar extension and its SeaMonkey Web application suite—all within the last six days. The new Thunderbird 1.5.0.12 replaces 1.5.0.10. The 1.5.0.11 version number was skipped […]

Chris Preimesberger

Jun 6, 2007

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Empresa

Sobre nós Fale conosco Anuncie conosco Editorial Policy

Categorias

Últimas notícias Recursos Inteligência artificial Vídeo Big Data e análise Nuvem Redes

Divulgação de anunciantes: alguns dos produtos que aparecem neste site são de empresas das quais a TechnologyAdvice recebe remuneração. Essa remuneração pode influenciar como e onde os produtos aparecem neste site, incluindo, por exemplo, a ordem em que aparecem. A TechnologyAdvice não inclui todas as empresas nem todos os tipos de produtos disponíveis no mercado.

Termos de serviço Política de privacidade Califórnia - Não venda minhas informações