Fix in for Firefox bugs

TalkBack 25 of 54:

Next »

« Previous

• Thread View
• Flat View

More low risk?

"[MSIE] Unpatched vulnerabilities are low risk. Many of the older
ones are moot because they apply pre-SP2."

Three more "moderately critical" :

http://secunia.com/advisories/13251/
http://secunia.com/advisories/13317/
http://secunia.com/advisories/13203/

Moderately Critical:

Typically used for remotely exploitable Denial of Service
vulnerabilities against services like FTP, HTTP, and SMTP, and for
vulnerabilities, which allows system compromises but require
user interaction.

This rating is also used for vulnerabilities allowing system
compromise on LANs in services like SMB, RPC, NFS, LPD and
similar services, which are not intended for use over the
Internet.

Doesn't sound low risk to me, and these are just the published
vulnerabilities.

"The bottom line is, this article isn't about Microsoft's security
problems, it's about Firefox problems."

I didn't start it;-)

"The way Mozilla advertises Firefox makes it sound like Firefox
is suppose to be fundamentally superior in security. That simply
isn't true."

It isn't? What no ActiveX (cause of many MSIE problems), public
disclosure of the source code and competitions to find bugs,
separation of the browser from the OS layer (for OSes that
respect it), active and transparent security group, 3 out of 23
Secunia advisories marked as "Unpatched" (vs 19 out of 85 for
MSIE).

I've never claimed Firefox is without vulnerabilities but I see no
evidence yet that would put it on the level of MSIE. It appears to
have pretty good fundamentals (with much more work still to be
done).

And I didn't even have to resort to the "and nobody uses it
making it a less attractive target" argument (oops):-)

Posted by: Richard Flude   Posted on: 09/21/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Live Webcast: Activate Today! Realize ROI with Intel(r) vPro? Technology and LANDesk Intel Join the team from the Intel vPro Expert Center for an informative Webcast ... Download Now
• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now