Highly Critical Firefox Vulnerability

[Flatiron]

WorldStart Message Boards - highly critical Firefox vulnerability

http://forum.worldstart.com/showthread.php?t=73077

Highly critical Firefox vulnerability

Secunia - Advisories - Firefox URL Domain Name Buffer Overflow

http://secunia.com/advisories/16764/

Instead of the Securia workaround of not browsing untrusted sites,

you could just disable IDN entirely by typing about:config into

the location bar and press enter, type IDN into the filter,

find this line:

network.enableIDN

right click the line and select toggle (to false), close and reopen Firefox.

-----------------------------------

This tests whether you're vulnerable or not (don't click it if you haven't disabled IDN!):

http://www.security-protocols.com/firefox-death.html

If it loads a blank page, you're safe. If it crashes Firefox (Mozilla or Netscape), you're not safe.

------------------------------------------------

More info here

Highly Critical Vulnerability Reported by Secunia - MozillaZine Forums

Edited September 9, 2005 by flatiron__2

[robroy]

Thanks flatiron, I got a blank page

[rv56]

I did the download patch method posted in Software Updates posted by chachazz and it works. I got the blank page... It shows up(no IDN) in Help and About Mozilla Firefox after the patch is downloaded and a Firefox restart.

Thanks for the warning and heads up thread flatiron, very much appreciated..

[Chachazz]

Please go to the following link; Patch Released!

http://www.besttechie.net/forums/index.php?showtopic=4790