Mozilla's browser exposes our information

Nov 22, 2006 12:09 GMT  ·  By

Many users think that Internet Explorer is vulnerable and contains a lot of bugs that will allow attackers to control their computer. So, a new browser that can bring them a better security and performance was a real need. Mozilla Firefox is one of the most popular browsers on the Internet, representing the application that introduced the "tabbed browsing" function. A lot of users consider that Firefox is safer and more secure than IE, so they installed it as the default browser.

I feel sorry to disappoint these users and to announce that a new vulnerability has been discovered in the Password Manager utility, a flaw that can allow attackers to steal important information.

Security company Secunia published an advisory, saying that "the vulnerability is caused due to the Password Manager not properly checking the URL before automatically filling in saved user credentials into forms. This may be exploited to steal user credentials via malicious forms in the same domain."

"The vulnerability is confirmed in version 2.0.0. Other versions may also be affected," they added.

Even if Secunia rated the vulnerability as "Less Critical" and they already published the solution ("disable the "Remember passwords for sites" option in the preferences'), it seems that no browser can assure us the desired security for our browsing.