Beware Firefox users !!!

Beware Firefox users !!!

sexxiicoolguy
sexxiicoolguy

December 1st, 2006, 12:45 pm #1

Firefox vulnerable to password-stealing attack
Published 14:52:42 23.11.2006

A flaw in Mozilla Corp.'s Firefox browser makes it easy for cybercriminals to steal user information on Web sites where users create their own pages, such as MySpace.com.

The flaw lies in Firefox's Password Manager software, which can be tricked into sending password information to an attacker's Web site, said Robert Chapin, president of Chapin Information Services Inc. For this attack to work, attackers need to be able to create HTML (Hypertext Markup Language) forms on the Web site, something that is allowed on blogging and social networking sites.

The attack was used in a MySpace phishing attack reported in late October. In that attack, users registered a MySpace account named login_home_index_html and used it to host a fake log-in page that exploited the flaw.

More info can be found at :

Source
http://www.infoworld.com/article/06/11/ ... ing_1.html

**********************
Sexxiicoolguy (Scape Mod)
Quote
Share

Anonymous
Anonymous

December 1st, 2006, 2:33 pm #2

Thanks buddy, I had it installed and just removed it, I was a bit suspicious until I saw this posting.

Quote
Share

Joined: January 30th, 2003, 3:42 am

December 1st, 2006, 10:12 pm #3

Your welcome... but be sure to keep an eye for patches ...the firefox crew should be able to fix this problem ...aiight happy surfing

Note: check web browsers thread ..

*****************
Sexxiicoolguy (Scape Mod)
Last edited by sexxiicoolguy on December 1st, 2006, 10:42 pm, edited 1 time in total.
Quote
Like
Share

Anonymous
Anonymous

December 3rd, 2006, 10:58 pm #4

Thanks SCG, good of you to keep us informed...
Quote
Share