Mais uma falha no Firefox detectada este mês

[The Zombie]

Ver aqui please.

Zero-Day Firefox Exploit Sends Mozilla Scrambling
http://www.eweek.com/article2/0,1759,1814056,00.asp

 

[Nemesis11]

Successful exploitation requires that the site is allowed to install software (default sites are "update.mozilla.org" and "addons.mozilla.org").

Update (08.05.2005) - The Mozilla Foundation patched (partially) this issue on the server side by adding random letters and numbers to the install function, which will prevent this exploit from working.

0123456789