Rated as moderately critical

Jun 7, 2005 16:16 GMT  ·  By

Although Firefox and the rest of the applications developed by Mozilla Foundation have been and are still praised for the advantages they have over the proprietary ones, we have to maintain our objectivity on the subject and admit the flaws from these open-source applications.

Mozilla Foundation has a to deal with a new security breach announced by Secunia as being known for almost seven years, which allows hackers to change the content of several sites.

According to the information presented by Secunia, both Mozilla 1.7.x and FireFox 1.x are vulnerable to this security breach, originally identified in 1998. The bug allows viewing the original web page in a window of the navigation program, while in another window one can open a website that belongs to a spoofer which can infiltrate a code in the window of the original site, tricking this way the user into revealing identification data, banking accounts, etc.

The flaw was rated as "moderately critical", and Secunia has posted an example of a spoofing attack, so that Internet surfers can test if their browsers are vulnerable to this breach.

The same flaw was also identified in Firefox, and in all available browsers that have been released one year ago. A patch aimed at solving this trapdoor to personal information has been posted since FireFox's pre-release and in Mozilla 1.7. The bug identified now is a version of that breach.