Post Thu Jul 26, 2007 7:56 am

TheRegister: Zero-day security flaw leaves Firefox wide open

Security researchers have disclosed a zero-day vulnerability in the latest version of Firefox that gives miscreants complete control of Windows-based computers when the Mozilla browser visits a booby-trapped website.

The vulnerability resides in the way Firefox handles uniform resource identifiers, the protocols that allow the browser to access software and other resources located on a PC. The browser fails to properly vet at least five different URIs, a flaw that could allow an attacker to install malware on a PC simply by convincing a victim to click on a doctored link.


Read the full article at The Register.

http://www.theregister.co.uk/2007/07/25 ... efox_vuln/