[lotuseclat79]

New vulnerability discovered for Firefox 3.5.1.

Not long after Firefox 3.5.1 was released to address a security issue, a new exploit has been found and a proof of concept has been posted.

Either disable JavaScript to mitigate the problem until it is fixed or use the FF NoScript add-on properly configured unless a site on your whitelist becomes compromised.

-- Tom

[Kenny94]

Thanks Tom!

[perfume]

Dear lotuseclat79,
Thanks for the article! What percentage of websites use javascript? Thanks to you ,i went scouring for understanding the difference between Java and Javascript. For those who are interested : http://www.htmlgoodies.com/beyond/ja...le.php/3470971

[TOGG]

More information on the 'new' exploit here; http://isc.sans.org/ May not be too serious if Mozilla's view is correct?

As an Opera user I can afford to take a relaxed view about this and no, I'm not suggesting that Opera is better or safer than other browsers or that it can't be successfully attacked.

As for how many sites use JavaScript, it's going to be a lot, certainly many more than those that require Sun Java!

[lotuseclat79]

Originally Posted by TOGG

More information on the 'new' exploit here; http://isc.sans.org/ May not be too serious if Mozilla's view is correct?

As an Opera user I can afford to take a relaxed view about this and no, I'm not suggesting that Opera is better or safer than other browsers or that it can't be successfully attacked.

As for how many sites use JavaScript, it's going to be a lot, certainly many more than those that require Sun Java!

Hi TOGG,

Sun is the only reliable source for Java. The MS version was a farce and has long since been retired. Only the Java JRE environment is needed for browsing. As for JavaScript - use Firefox Add-on NoScript to plug the holes, e.g. cross-scripting attacks.

-- Tom

[TOGG]

I rarely use Firefox but, when I do I have NoScript active, the only other Addon I have is IETab.

I suppose the only way to check how much you need JavaScript is to disable it in every browser you have and then see how often you get prompted to enable it before a website or page will display properly.

I'm not sure where MS's lame Java version got mentioned but I do remember following some instructions to uninstall it from my '98 computer just over two years ago!