Wen es interessiert !
Klatsch, Fakten, News, Betas 5.087 Themen, 27.849 Beiträge
Naja,
ich hoffe man kann dieses Link besuchen.
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9072018&source=NLT_VVR&nlid=37
Falls nicht dann kurzbeschreibung.
Gestern hat Mozilla 10 Sicherheitsluecke gestopft, die haelfte wurde als Kritisch betrachtet.
"There's a little bit here to interest most everyone," said Andrew Storms, director of security operations at nCircle Network Security Inc. "The bulletins claim no favor in the many types of vulnerabilities typically associated with browsers."
Among the critical flaws were a pair that could be exploited to crash the browser or its JavaScript engine, and perhaps do more. "Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort, at least some of these could be exploited to run arbitrary code," Mozilla wrote in Advisory 2008-15.
Mozilla also patched potential identity leaks, spoofing bugs and cross-site scripting vulnerabilities in 2.0.0.13. But the fix that caught Storms' eye was detailed by 2008-18, a fix for LiveConnect, a feature that harks back to Firefox's predecessor, Netscape Navigator. LiveConnect lets Java applets call a Web page's embedded JavaScript, or JavaScript access the Java runtime libraries, and it is used by both Firefox and Apple Inc.'s Safari 3 browser.
Gruesse
Sascha