Email:support@eranet.com WhatsApp:+(852)68882160

Mozilla Releases Firefox 10.0.2 for png Flaw

  • Release time:2012-02-20

  • Browse:3484

  • From the 'Be Careful What you Click' files:

    At the end of last week, Mozilla released Firefox 10.0.1, which fixed a single flaw. Now here we are at the end of a new week, and there is another release with Firefox 10.0.2.

    This time the flaw is one that I'm familiar with - as it was patched by Google in Chrome 17, just slightly ahead of the Firefox 10.0.2 update.

    The actual flaw is a vulnerability in the libpng graphics library that many open source tools (including browsers) use. It's an integer overflow flaw that could have some serious consequences.

    "An attacker could craft malicious images which exploit this bug, and deliver them to users through websites or email messages," Mozilla warned in its advisory.

    According to Mozilla, they were alerted about the flaw by Red Hat.

    In any event, make sure you update, this is a flaw looks relatively easy to me to exploit and thanks to the quick actions of Google and Mozilla - now trivially easy to protect against too.

    Sean Michael Kerner is a senior editor at InternetNews.com, the news service of the IT Business Edge Network, the network for technology professionals. Follow him on Twitter @TechJournalist.


    About Eranet
    Todaynic.com International Limited(Eranet.com) was incorporated in Hong Kong in 2005, directly under Todaynic.com, Inc. which was established in 2000. As one of the first ICANN (The Internet Corporation for Assigned Names and Numbers), Verisign, HKDNR, and CNNIC (The China Internet Network Information Center) accredited registrars, Eranet is also a leading provider of services in domain name registration and web hosting.

     

    4 domain names have the lowest price.

    .com  only USD 9.77/year
    .net  only USD 9.77/year
    .asia only USD 20.45/year
    .hk   only USD 22.63/year

    And we provide 10% off discount for hosting right now.

Search

Document