Jump to content

Just A Warning Of Using Ie And Firefox:


Guest Reimar

Recommended Posts

Guest Reimar

That's mainly affecting system running IE and Firefox together.

As I thinkl that's interesting for members of thaivisa because many having IE and Firefox together on one system.

Read:

That's the latest update from security researchers who initially laid the blame on Microsoft's Internet Explorer for the latest zero-day exploit that also can afflict those using the Firefox Web browser.

Users could face a "highly critical" risk if they have both IE and Firefox version 2.0, or later, loaded on their computer. The trouble begins when browsing a malicious site while using IE and it registers a "firefoxurl://" URI (uniform resource identifier) handler, which allows the browser to interact with specific resources on the Web. As a result, users may find their systems remotely compromised.

Earlier Tuesday, security researcher Thor Larholm, who discovered the IE flaw, and security research giant Symantec put much of the blame on IE, while Secunia's Thomas Kristensen, chief technology officer, attributed the problem to Firefox versions 2.0 or later.

"It's a little bit of both," said Oliver Friedrichs, director of Symantec's Security Response Center. "You have two very complex applications that are not playing well together and leading to a security issue. The components themselves are secure as stand-alone products but not together."

"Firefox is the current attack vector, but Internet Explorer is to blame for not escaping...characters when passing on the input to the command line," said Larholm, in response to a reader's comments. "I agree that Firefox could have registered its URL handler with pure DDE (dynamic data exchange, the protocol for information exchange) instead and thereby have avoided the possibility of a command-line argument injection, but IE should still be able to safely launch external applications."

Friedrichs noted that while Firefox, which released version 2 in October, has gained in popularity, most Firefox users will also have IE loaded on their computers, since it comes with the Windows operating system.

The number of people who may be at risk could be substantial, he added.

Meanwhile, Kristensen of Secunia said: "A new URI handler was registered on Windows systems to allow Web sites to force launching Firefox if the 'firefoxurl://' URI was called, like ftp://, http://, or similar would call other applications."

But because of the way the URI handler was registered by Firefox, it causes any parameter--which activates a program to perform a particular task--to be passed from Microsoft's Internet Explorer, or another application, to Firefox, when firefoxurl:// is activated.

Source: http://news.com.com/8301-10784_3-9741435-7.html

Link to comment
Share on other sites

So it's problem unless somebody can tell me how to remove IE from Win98SE.

Seems these people haven't addressed reality.

Edited by Maestro
Removed quoted text. Unnecessary to quote the entire, lengthy post.
Link to comment
Share on other sites

So it's problem unless somebody can tell me how to remove IE from Win98SE.

Seems these people haven't addressed reality.

It's easy to remove Win98SE, err, I meant IE. Insert a Linux distro CD into your CD-ROM drive and reboot. Then follow the instructions to remove all partitions (especially those containing the Redmond Virus).

Edited by Maestro
Reduced quoted text. No need to quote the entire, lenghty OP.
Link to comment
Share on other sites

So it's problem unless somebody can tell me how to remove IE from Win98SE.

Seems these people haven't addressed reality.

if you are running win 98se, you have bigger problems than just firefox and ie.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.







×
×
  • Create New...