sinatosk Posted August 4, 2004 Share Posted August 4, 2004 I installed Mozilla Firefox 0.9.3 earlier today and then later on just for the fun of it I decided to check to see if the vulnerability still effected me... strangly it does... I was wondering if anyone else with Mozilla Firefox 0.9.3 is still being effected. link is below. http://www.nd.edu/~jsmith30/xul/test/spoof.html Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/ Share on other sites More sharing options...
Pink Floyd Veteran Posted August 4, 2004 Veteran Share Posted August 4, 2004 this is supposed to be fixed with 0.9.3 Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298138 Share on other sites More sharing options...
Zycoflow Posted August 4, 2004 Share Posted August 4, 2004 Yep it still happens on my pc....... :blink: :no: Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298154 Share on other sites More sharing options...
sinatosk Posted August 4, 2004 Author Share Posted August 4, 2004 phew... least I know it's not just me then Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298174 Share on other sites More sharing options...
uniacidz Posted August 4, 2004 Share Posted August 4, 2004 LOLOLOL Yep still happens. Funny and ironic as isnt just IE that has **** ups with patches/bug fixes. Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298179 Share on other sites More sharing options...
em_te Posted August 4, 2004 Share Posted August 4, 2004 I think Firefox should have followed IE's lead in making the content area sunken into the browser window. It allows you to tell whether something is part of the browser window or not regardless of whether anything is spoofed. https://www.neowin.net/forum/index.php?showtopic=192796 Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298197 Share on other sites More sharing options...
Ultra Frosty Posted August 4, 2004 Share Posted August 4, 2004 I bet Microsoft is paying people to try to **** around with the firefox source code. Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298335 Share on other sites More sharing options...
dL Posted August 4, 2004 Share Posted August 4, 2004 What spoof? :huh: Too lazy to read and comprehend. Someone wanna explain for me? :) dL Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298346 Share on other sites More sharing options...
Rudy Posted August 4, 2004 Share Posted August 4, 2004 thats so funny, they made fun of IE when a patch didnt quite work....now look at this Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298385 Share on other sites More sharing options...
OPaul Posted August 4, 2004 Share Posted August 4, 2004 Jesus, this is a pretty big bug too. Posted; http://forums.mozillazine.org/viewtopic.php?p=699343#699343 Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298536 Share on other sites More sharing options...
Kasteo Posted August 4, 2004 Share Posted August 4, 2004 I haven't tried Firefox 0.9.3 yet, but it has been fixed in the nightly branch build I'm using since August 03. Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298692 Share on other sites More sharing options...
Si Veteran Posted August 4, 2004 Veteran Share Posted August 4, 2004 but it has been fixed in the nightly branch build I'm using since August 03. Yup, it throws up XML Parsing Error: undefined entityLocation: http://www.nd.edu/~jsmith30/xul/test/browser2.xul Line Number 856, Column 36: <menuitem accesskey="&releaseCmd.accesskey;" -----------------------------------^ Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584298805 Share on other sites More sharing options...
IGAU Posted August 4, 2004 Share Posted August 4, 2004 As far as I'm concerned, I can find no evidence to say that this was supposed to be in 0.9.3 at all... unless you can give a source which directly quotes a developer stating that, please stop spreading rubbish about a "messed up" release. Four security bugs were fixed with 0.9.3, and if you check the thread already linked, you'll see why I don't even consider this an exploit. Kasteo, I'd be interested to know what build you're using, since I can't think of a fix for this at all, short of forcing the legitimate statusbar to display for XUL content (i.e. prevent popups disabling it), nor can I find any checkins or bugfixes to indicate that any change has been made in relation to this "bug" at all. Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299088 Share on other sites More sharing options...
Chad Posted August 4, 2004 Share Posted August 4, 2004 moved to Web Browser Discussion Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299271 Share on other sites More sharing options...
Kasteo Posted August 4, 2004 Share Posted August 4, 2004 ...Kasteo, I'd be interested to know what build you're using, since I can't think of a fix for this at all, short of forcing the legitimate statusbar to display for XUL content (i.e. prevent popups disabling it), nor can I find any checkins or bugfixes to indicate that any change has been made in relation to this "bug" at all. Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7) Gecko/20040804 Firefox/0.9.1+ When you click on the example of an exploit XUL content link it will show.... XML Parsing Error: undefined entity Location: http://www.nd.edu/~jsmith30/xul/test/browser2.xul Line Number 856, Column 36: <menuitem accesskey="&releaseCmd.accesskey;" -----------------------------------^ Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299504 Share on other sites More sharing options...
L3thal Veteran Posted August 4, 2004 Veteran Share Posted August 4, 2004 Glad to see they "fixed" the spoof :rolleyes: Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299556 Share on other sites More sharing options...
stockwiz Posted August 4, 2004 Share Posted August 4, 2004 I still see the spoof, but because of the way I have the browser configured, I'd never be fooled by it.. it's so vastly different looking from the way I have mine configured not to mention I have disabled the ability for javascript to hide things. Still, it should be addressed. It's still in beta and in a constant state of change as bugs get fixed, so I'll give them a bit of time yet.. I just wish the gecko engine loaded images faster. Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299687 Share on other sites More sharing options...
L3thal Veteran Posted August 4, 2004 Veteran Share Posted August 4, 2004 I just wish the gecko engine loaded images faster. Amen :yes: Link to comment https://www.neowin.net/forum/topic/198946-mozilla-firefox-vulnerability-effects-093/#findComment-584299864 Share on other sites More sharing options...
Recommended Posts