Mozilla to fix Firefox security hole in patch
Licensed archive · Attributed source reporting
411 Brief
The Mozilla Foundation announced today a plan to patch vulnerability in Mozilla Firefox 1.5 in late January or early February 2006. Mike Schroepfer, vice president of engineering of the Mozilla Foundation, states "it's a low-severity issue, but we will address it anyway." Packetstorm Security posted that Firefox 1.5, released on November 30, has vulnerability in its history.dat file, such that Firefox becomes very slow after restarting from a visit to a website exploiting the vulnerability. A URL of a few million characters takes advantage of
The Mozilla Foundation announced today a plan to patch vulnerability in Mozilla Firefox 1.5 in late January or early February 2006.
Mike Schroepfer, vice president of engineering of the Mozilla Foundation, states "it's a low-severity issue, but we will address it anyway."
Packetstorm Security posted that Firefox 1.5, released on November 30, has vulnerability in its history.dat file, such that Firefox becomes very slow after restarting from a visit to a website exploiting the vulnerability. A URL of a few million characters takes advantage of the vulnerability. History.dat stores the user's recently visited sites. Initially Packetstorm posted that a tailored URL could crash Firefox. When attempting to recreate the problem, Mozilla engineers found that the browser works slowly and takes an extremely long time to load a website, but does not crash.
If one does encounter the problem after visiting an exploiting website, clearing out the history will fix it.
Sources & reporting note
Licensed archive reporting by Wikinews contributors. Text: CC BY 2.5 (https://creativecommons.org/licenses/by/2.5/). Original source date retained. 411 has not independently verified this archive report.
Read the source: Wikinews ↗Source published 10 Dec 2005, 05:30 am IST
