A Bug Discovered In Firefox 1.5.0.2
As reported by Secunia.com, a bug has been discovered in the current release of the popular Firefox browser that could, with user help, allow remote code execution.
Rated as a low security risk because of the need for user action, the flaw results from the improper use of an img tag. By linking the tag to a non-image file the browser will show a broken image link. If the user should right click and select View Image, the file will be downloaded and, if the file type is in the Firefox bypass list, executed.
Firefox is working on a patch. In the meantime the workaround for this flaw is to simply NOT perform the above action on an unknown or untrusted website.
Firefox “View Image” Local Resource Linking Weakness
Related Stories
POSTED IN: Browsers, Secure That Computer, Security
0 opinions for A Bug Discovered In Firefox 1.5.0.2
No one has left a comment yet. You know what this means, right? You could be first!
Have an opinion? Leave a comment: