Exploit code chases two Firefox flaws (May 9, 2005)

ZDnet ^ | May 9, 2005 | Dawn Kawamotot

[CometBaby]

If you use the Firefox browser .. read this !! .. Two vulnerabilities in the popular Firefox browser have been rated "extremely critical" because exploit code is now available to take advantage of them. The cross-site scripting and remote system access flaws were discovered in Firefox version 1.0.3, but other versions may also be affected, said security company Secunia, which issued the ratings Sunday.

[CometBaby]

Here is an explanation on the exploit dated Dec 8, 2005 (very recent) about this exploit ..

"Unpatched Firefox 1.5 exploit made public" .

The way it affected me is becuase I leave my browser open and when I came back in the morning, it was chucking down 2GB of ram.

http://news.com.com/Unpatched+Firefox+1.5+exploit+made+public/2100-1002_3-5987401.html

[flashbunny]

from your link:

"Correction: This story incorrectly stated the affiliation of Mike Schroepfer. It also misstated Mozilla's results in verifying the Firefox 1.5 flaw. The problem itself was not a security vulnerability but actually a flaw in the browser, according to Mozilla. In addition, it misstated PacketStorm's assessment of the situation."

[demlosers]

What you described, it looks like Firefox has a "memory leak."

[NoCmpromiz]

Except that the exploit you reference is not the subject of the ZDNet article from May. Here is Mozilla's official response to the current issue:

Long-title temporary startup unresponsiveness

[The Westerner]

How do I know which version I'm using?
I never get popups with Firefox. But I do have trouble using Cookies on it. Sometimes I want to accept something but I had at another time denied its cookie. Firefox could be easier with this. I use Cookie Pal for IE and it's easy to wipe up after.
I have more complaints about Gmail (can't edit anymore and can't link anymore).