Firefox, Mozilla, Thunderbird security issue and fix

[aux]

Info and fix here.

The newest versions (as of today) should have the issue fixed.

Edit:
To check if the fix is installed, type
about:config
in the location bar; the following line should be added to the preferences:
network.protocol-handler.external.shell default boolean false

(this is for Firefox and Mozilla, not sure about Thunderbird)

 

[shimsham]

thanks for the heads up:beer:

 

[neutralizer]

nothing happened after i clicked install now.

 

[Anubis]

thanks

 

[Sid59]

just patched my machines. really easy through the XPI extension.

or just set teh about:config.

 

[crazycarl]

thanks

 

[TheBDB]

Originally posted by: neutralizer
nothing happened after i clicked install now.

 

[Anubis]

Originally posted by: neutralizer
nothing happened after i clicked install now.

for which program?

i just did it for thunderbird and it works fine
its teh only one of thoes i use

 

[neutralizer]

Originally posted by: Anubis

Originally posted by: neutralizer
nothing happened after i clicked install now.

for which program?

i just did it for thunderbird and it works fine
its teh only one of thoes i use

firefox

 

[aux]

To check if the fix is installed, type
about:config
in the location bar; the following line should be added to the preferences:
network.protocol-handler.external.shell default boolean false

Edit: this is for Firefox and Mozilla, not sure about Thunderbird

 

[poopygood]

thanks for the notice, and thanks "aux" for helping me check to see if the fix was installed correctly.

 

[Blayze]

thanks

 

[MacBaine]

Wait... I thought only IE had security issues...


OH SN....!

 

[cronos]

Originally posted by: shimsham
thanks for the heads up:beer:

 

[neutralizer]

Originally posted by: poopygood
thanks for the notice, and thanks "aux" for helping me check to see if the fix was installed correctly.

 

[bernie48]

Great! Worked well for both FireFox and Thunderbird.

 

[OulOat]

Originally posted by: MacBaine
Wait... I thought only IE had security issues...


OH SN....!

OH SNAP YOU'RE A DUMBASS?!?!

They fixed it the same day they recieved the notice, so suck it long and suck it hard.

 

[orakle]

Originally posted by: OulOat
OH SNAP YOU'RE A DUMBASS?!?!

 

[gflores]

I heard the the security issue was like 2 years old and I also heard it was fixed the same day. Which one is it?

 

[aux]

Originally posted by: gflores
I heard the the security issue was like 2 years old and I also heard it was fixed the same day. Which one is it?

It seems that there is a 2 years old general discussion about handling external protocols, but the specific bug was patched within 24 hours after this specific issue was announced.

 

[VictorLazlo]

Dang it. I just switched to this crap because I was tired of patching IE.