Unpatched Flaw Means Firefox Passwords Can Be Stolen
Dubbed the "Reverse Cross-Site Request" vulnerability by its discoverer, the unpatched flaw is in Firefox's password-saving feature.
By Gregg Keizer
Nov 22, 2006 12:36 PM
Security experts Wednesday warned that Mozilla Corp.'s Firefox browser has an unpatched flaw that lets criminals pilfer Web site or account passwords, and said that the tactic has already been used on MySpace to steal log-in information from users of the popular social networking service. [...]
This problem also exists in IE:Bugs and Fixes: Internet Explorer 7 Proves Buggy Already
It's safer, but security holes still affect the new browser. Plus, a worm in iPods.
Stuart J. Johnston
Wednesday, November 22, 2006 01:00 AM PST
Internet Explorer 7 for Windows XP is finally out. Because it tries to fix or prevent many of the numerous security flaws that hit IE 6, it's arguably the largest bug fix we've seen in quite a while. For that reason alone, I recommend installing the update. [...]
The iPod worm is old news