New cookie bug identified in the program

Feb 15, 2007 15:50 GMT  ·  By

Firefox is currently one of the most popular browsers on the Internet, allowing you to visit webpages safer and more secure. As you must know, Firefox represents the most powerful rival for Internet Explorer, the application included in Microsoft's well known operating system, offering some features that were also implemented into the software giant's program. The best example is provided by the tab browsing support that helps you browse multiple websites using a single window of the application, a function that was also included in Internet Explorer 7, the last version of the Microsoft browser.

Although Firefox is regarded as a more secure and safer browser than Internet Explorer, a recent study revealed that Microsoft fixed all the bugs identified in its application. Because I'm sure many of you are using Firefox, you must know that the F-Secure team identified a new vulnerability in the browser that can allow an attacker to execute site scripting attacks and make your computer even more vulnerable.

"There's a new bug reported in the way Firefox handles writes to the 'location.hostname' DOM property. The vulnerability could potentially allow a malicious website to manipulate the authentication cookies for a third-party site. The bug was submitted by Michal Zalewski and was tested with the current version of Firefox. The bug could allow for the browser to appear as if were connecting to a bank, when in fact it would instead be receiving data from a bad guy. Firefox is often patched quickly, so take note, it's an excellent idea to enable Firefox's automatic updates option if you haven't already," the F-Secure team sustained in a blog post.

I tested the security flaw on my Firefox version 2.0.0.1 and the website provided by the security company sustains I'm vulnerable. If you want to test your own version of the browser, you should follow this link and click on the "Click here to begin test" button.