Tuesday, October 03, 2006
Slashdot is reporting that the Firefox hole is potentially a hoax and that all attempts at an exploit using the example code have failed. If not a hoax, it is implied that the worst payload would be a DDOS attack on a third party, not a commandeering of the client machine as previously supposed.
As part of our talk we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this, and I personally have not gotten it to result in code execution, nor do I know of anyone who has... I have not succeeded in making this code do anything more than cause a crash and eat up system resources, and I certainly haven't used it to take over anyone else's computer and execute arbitrary code,' Spiegelmock said."


posted on 10/3/2006 4:38:43 PM (Eastern Daylight Time, UTC-04:00)  #    Comments [2]
  • Blog reactions
  •  Wednesday, February 01, 2006

    Everyday, I love Firefox 1.5 just a little more. I’ve long used ClamWin/ClamAV for my virus scanning and this extension just glued it to Firefox. Sweet. May I browse safely from here to Feb 3 (Nyxem virus).

    ClamWin Antivirus Glue for Firefox - Today's Browser Tip:

    ClamWin Antivirus Glue is a simple extension for Firefox that does just one thing: It automatically scans every file you download for viruses. As the name implies, the "glue" uses ClamWin Antivirus, a free, open source Windows antivirus product, and in order to have the extension installed you'll need to install ClamWin as well. Every little bit helps, right?
     
    [Via Download Squad]

    [Update] I wanted to update this post to respond to a few emails that I have received regarding a previous post about Firefox in which I compared it to IE and did so unfavorably. My comparisons were based on the 1.0 release and my tune has completely changed since the 1.5 release. FF is like a breath of fresh air. At this point, I am not even convinced that I will bother installing IE 7 unless I hear about some substantial improvements that would compel me to do so. I am a convert and would recommend Firefox 1.5+ to anyone. IE is no longer my default browser and I would probably just uninstall it if I could still run Windows Update.
    posted on 2/1/2006 2:30:37 PM (Eastern Standard Time, UTC-05:00)  #    Comments [0]
  • Blog reactions