Technology news and Jobs 
Information Technology News Firefox flaw re-rated as high severity
Information Technology News Firefox flaw re-rated as high severity | Firefox flaw re-rated as high severity |
|
| by Stephen Withers | |
| Thursday, 31 January 2008 | |
      
The issue concerns so-called 'flat' add-ons that store their components in multiple files instead of using a single .jar file. A flaw in the way the program handles the chrome protocol means a maliciously crafted web page is able to traverse directories in order to read data from known locations. Many add-ons use flat packaging, including popular ones such as Greasemonkey and Download Statusbar. Add-on developers have been asked to repackage their wares as .jar files, but Firefox 2.0.0.12 - "which will be available shortly," according to the Mozilla Security Blog - will include a fix for the problem. |
Tags
| < Next story in category | Previous story in the category > |
|---|
