Mozilla Foundation rolls out second security update for Firefox browser

Saturday, March 26, 2005

The Mozilla Foundation released the second major security update this week for their flagship browser Firefox. The fix patches a serious flaw in the way Firefox handles animated GIF image files. Firefox browsers infected by malicious code could experience a buffer overflow, temporarily locking up or "freezing" a user's computer, or even executing arbitrary code which could take over a user's computer.

The flaw was discovered and reported by Internet Security Systems, Inc. The upgrade was the second major security fix in less than a month for the browser, which has grown in popularity to ten percent of the browser market in the United States.

Although there were no known exploits of the bug, Chris Hoffman, director of engineering at Mozilla, told reporters, "[because] Mozilla is committed to delivering the most secure product possible, we decided to quickly issue an update to patch the bug."

The Mozilla Foundation did not offer any details about the issue of vulnerability, but a second major security overhaul in such a short time underscores challenges faced by the nonprofit foundation as it goes head-to-head with the market leading Internet Explorer browser by Microsoft.

The new release, Firefox version 1.0.2, "illustrates the dedication of the strong community of developers working on the product," according to Hoffman. "...we’re able to turn around patches much faster than a traditional corporation," he added.

Users can download the update at no charge, and can find additional information at the Mozilla website.

Sources

"Firefox gets a GIF-related buffer overflow fix" — NewsForge, March 26, 2005

Ryan Naraine. "Firefox Gets Major Security Makeover" — eWeek, February 24, 2005

Paul Thurrott. "Mozilla: We're More Secure Than IE" — WindowsITPro, March 25, 2005

This page is archived, and is no longer publicly editable.

Articles presented on Wikinews reflect the specific time at which they were written and published, and do not attempt to encompass events or knowledge which occur or become known after their publication.

Got a correction? Add the template {{editprotected}} to the talk page along with your corrections, and it will be brought to the attention of the administrators.

Please note that due to our archival policy, we will not alter or update the content of articles that are archived, but will only accept requests to make grammatical and formatting corrections.

Note that some listed sources or external links may no longer be available online due to age.

The text of this article is licensed under the terms of the Creative Commons Attribution 2.5 License