daihuu
12-07-2004, 16:25
Lỗi Mozilla được công bố hôm 7/7 trên mạng tin an ninh Full Disclosure, kèm theo đường link tới bản vá lỗi ShellBlock (http://update.mozilla.org/extensions/moreinfo.php?id=154). Khiếm khuyết này có thể cho phép hacker tiến hành hoạt động phá hoại trên các ứng dụng trong máy tính chạy Windows XP (không ảnh hưởng tới người dùng Linux hay Macitosh). Vấn đề của browser này liên quan đến phương thức mà Windows XP điều hành trình quản lý (handler) “shell” URI.
ShellBlock is a security fix update for Bug 250180. It disables the ability to call the shell protocol from within affected Mozilla programs. The shell protocol allows applications to call Windows Explorer using the protocol to run the file specified on the local machine. This update is for users of Mozilla 1.x (up to Mozilla 1.7), Mozilla Firefox (up to 0.9.1), and Mozilla Thunderbird (up to 0.7.1) on Microsoft Windows 2000 and XP only.
Mozilla 1.7.1, Firefox 0.9.2, Thunderbird 0.7.2 have been released with this fix included.
For more information on the issue, read What Mozilla Users should know about the shell: protocol security issue (http://www.mozilla.org/security/shell.html).
Cài bản sửa lỗi (Right-Click to Download): ShellBlock fixes (http://update.mozilla.org/extensions/install.php/shellblock.xpi?id=154&vid=261)
ShellBlock is a security fix update for Bug 250180. It disables the ability to call the shell protocol from within affected Mozilla programs. The shell protocol allows applications to call Windows Explorer using the protocol to run the file specified on the local machine. This update is for users of Mozilla 1.x (up to Mozilla 1.7), Mozilla Firefox (up to 0.9.1), and Mozilla Thunderbird (up to 0.7.1) on Microsoft Windows 2000 and XP only.
Mozilla 1.7.1, Firefox 0.9.2, Thunderbird 0.7.2 have been released with this fix included.
For more information on the issue, read What Mozilla Users should know about the shell: protocol security issue (http://www.mozilla.org/security/shell.html).
Cài bản sửa lỗi (Right-Click to Download): ShellBlock fixes (http://update.mozilla.org/extensions/install.php/shellblock.xpi?id=154&vid=261)