Security alert for Mozilla users.

  • Thread starter Thread starter John Corliss
  • Start date Start date
John Corliss said:
There is already a 1.7.1 version released.
Click to expand...
The site also hosts a self-installing patch that only takes a
couple of seconds to apply but does require (of course) a restart.
 
Derald said:
The site also hosts a self-installing patch that only takes a
couple of seconds to apply but does require (of course) a restart.
Click to expand...

Hmm. I didn't notice that one. Got a link?
 
Has anyone gotten this to work?
To install the security patch for Mozilla or Firefox, follow these instructions:
1.Click Install Patch.
2.In the Software Installation window, click the "Install Now" button.
3.Exit and restart your Mozilla or Firefox browser.
Click to expand...
When I click Install Patch I get the hourglass and then it goes away and
I am on the same page.
Stan
 
sabato 10/lug/2004 _Stan Weiss_ in said:
Has anyone gotten this to work?
When I click Install Patch I get the hourglass and then it goes away and
I am on the same page.
Click to expand...

Did you try this?

<q>

To verify the fix in your Firefox or Mozilla application, be sure to restart
the browser and then follow these steps:

1. Type about:config into the address field and hit Enter.
2. In the Filter toolbar, type shell.
3. Look for the preference listing network.protocol-handler.external.shell.
4. If you see the preference listed with the value of false then your
application has been patched.

</q>
 
Thanks but but when I type in shell there are no listings. When I type
in network they are a number of listing for network.protocol-handler.
but none for network.protocol-handler.external.shell
Stan
 
The file it wants to load is shellblock.xpi. Do I need to enable
anything to get this to work?
Stan
 
sabato 10/lug/2004 _Stan Weiss_ in said:
The file it wants to load is shellblock.xpi. Do I need to enable
anything to get this to work?
Click to expand...

Yes. You need to enable "Allow web sites to install software" under Tools -
Options - Advanced - Software update.

HTH
 
Some time ago I had gone into preferences->software installation and
unchecked enable software installations and check for updates. This is
what was causing my problem.
Stan
 
Aaron said:
Apparantly IE is vulnerable too.

Aaron (my email is not munged!)
Click to expand...

It's actually the exploitation of a vulnerability in WindowsNT/2000/XP,
which is why IE remains unsafe. Micro$oft have been aware of the problem for
2 years and have, as yet, left it unpatched. Mozilla browsers running on
other OS's are unaffected.
 
Back
Top