On 14 May 2005 at 20:42, Jari Williamsson wrote: > Phil Daley wrote: > > Firefox suffers 'extremely critical' security hole > > Security researchers say exploit code is already circulating online > > > News Story by Matthew Broersma > MAY 09, 2005 (TECHWORLD.COM) - > > Firefox has two unpatched security holes > > that could allow an attacker to take control of a user's computer > system, > and exploit code is already circulating on the Internet, > security > researchers have warned. > A patch is expected shortly > > 1.0.4 is now out which addresses these 2 issues.
A note that I posted in another forum after the release of 1.0.4: On Thu, 12 May 2005 01:20:26 -0400, Adam Fields wrote: > http://www.mozilla.org/products/firefox/ This fix highlights the HUGE difference between Firefox and IE in terms of safety. The vulnerabilities announced just a few days have already been patched. And Secunia shows quite clearly that Firefox's open vulnerabilities are much less serious than IE's. Compare these two charts: Firefox Criticality http://secunia.com/graph/?type=cri&period=all&prod=4227 IE Criticality http://secunia.com/graph/?type=cri&period=all&prod=11 Open those two graphs in separate tabs and then flip back and forth between them. You'll see that Firefox has a much lower number of discovered vulnerabilities in the most serious 3 of the 5 classes of vulnerability. Also, if you look at Firefox's unpatched vulnerabilties, all are in the bottom 2 of the 5 classes of vulnerability. IE, on the other hand, has several unpatched class 3-5 vulnerabilities. Although Firefox certainly has (and will continue to have) vulnerabilities: 1. its vulnerabilities are generally less serious than IE's. 2. none of the serious vulnerabilities remain unpatched, while some of IE's remain unpatched. 3. the Firefox vulnerabilities get patched much more quickly than IE's. All the media bobbleheads who wrote articles about how Firefox was now showing vulnerabilities just like IE really ought to do followups that make these 3 points clear. It won't happen, of course. -- David W. Fenton http://www.bway.net/~dfenton David Fenton Associates http://www.bway.net/~dfassoc _______________________________________________ Finale mailing list [email protected] http://lists.shsu.edu/mailman/listinfo/finale
