The Open-Source-Project Beonex, dedicated to bring Mozilla to the 
masses, released version 0.8-pre of Beonex Communicator for Windows and 
Linux. It bases in Mozilla1.0-branch code from around 2002-04-30 and can 
be downloaded at <http://www.beonex.com/communicator>.

Beonex Communicator was never vulnerable to the XMLHttpRequest attack. 
Earlier versions might have been vulnerable to other symptoms of the 
same bug, though, so the new version includes the fix previously 
announced by Frank Hecker.

The IRC scheme crash reported as followup is believed not to be exploitable.

It is strongly recommended that users of earlier versions of Beonex 
Communicator upgrade to the new version, because older versions contain 
said bugs and are no longer supported.

Ben Bucksch
Beonex

Reply via email to