« It's All the Same Thing | Main | A Connected World and how important is it? »
Opera, Firefox Bug Could Export Users' Web History
Keep your patches up to date!
Keep your patches up to date!
Keep your patches up to date!
I cannot stress this enough. Not just for the two applications in this report but for all of your computer programs and operating systems, keep your patches and updates up to date.
A flaw in the way the Firefox and Opera browsers handle an image file could allow an attacker to see what Web sites a person has visited.
The problem concerns how the two browsers handle a ".BMP," or bitmap, image file, according to an advisory written by Gynvael Coldwind of Vexillium.org, who posted a video illustrating the problem. You can see his technical description here.
A malicious bitmap file can be created that pulls other information from the browsers' memory. Some of the information that can be captured is random, but at other times could be valuable, the advisory said.
"The harvested data contains various information including parts of other Web sites, users' favorites and history and other information," Vexillium.org said.
Using the "canvas" HTML (Hypertext Markup Language) tag supported by the browsers, an attacker can capture the data. Then, using JavaScript, the information can be sent to a remote server.
The flaw could also crash Firefox. The vulnerability affects Firefox 2.0.0.11 and previous versions of that browser as well as the beta version of Opera 9.50.
Source: CIO.com
Opera, Firefox Bug Could Export Users' Web History
posted by KP on February 18, 2008 @ 11:55 PM
Tags: BMP, bugs, Firefox, Opera, security
Filed under: Technology
TrackBack
TrackBack URL for this entry:
http://blog.returnoninter.net/cgi-bin/mt-tb.cgi/82
Search
Recent Posts
- A Connected World and how important is it?
- Opera, Firefox Bug Could Export Users' Web History
- It's All the Same Thing
- GPS Goes Mainstream
- Six degrees of Stratum.
- Transparency Redux
- WE'VE DONE OUR CHRISTMAS SHOPPING...
- THE IDEAL CONFERENCING AID: RED BEANS AND RICE
- Email Hijack Scams
- Joy to the World Wide Web
[What is this?]
