New security report concerning Mozilla's browser

Nov 9, 2007 10:34 GMT  ·  By

Mozilla Firefox is again the main subject of the security advisories as a new vulnerability was discovered which doesn't seem to affect the latest 2.0.0.9 release. According to a report published by Security Focus, Mozilla Firefox is affected by a Jar URI cross-site scripting vulnerability discovered in all the browser versions prior to 2.0.0.9. A few days ago, the Firefox developer published a new release of the application which is supposed to fix most of the bugs and glitches discovered in older editions. However, the consumers using these versions can be affected by a new vulnerability reported today.

"Mozilla Firefox is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to steal cookie-based authentication credentials and other sensitive data that may aid in further attacks," Security Focus wrote in the advisory.

Mozilla Firefox is currently involved into one of the most important battles on the web right now as its rival Internet Explorer struggles to remain the first alternative when it comes to web-browsers. The competition is very important for both users and company, the fact that Mozilla's application is regarded as a more secure product being well known.

But the Firefox developer wants to take the browser to another level with the 3.0 version which is currently in beta stages. The Gran Paradiso flavor of Firefox is supposed to bring new and exciting functions into a web-browser.

Besides Firefox and Internet Explorer, some other companies plan to compete with the two giants for the leadership in the browser category. Opera Software and Apple, the developer of Safari, also want to become top players in the industry as their products received numerous updates and new functions in the recent period.