Firefox users: update to 2.0.0.2

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Version 2.0.0.2 was just released. It addresses some security issues, including one that's rated Critical, so if you use FF, check to make sure it's updated. If you use 1.5.x, click the link at the bottom there for your update.

Also, try the Secunia online checkup on your Windows rigs. It checks for missing security updates for popular software that could be exploited, such as torrent clients, file-compression utilities, media players, browsers, Flash Player, IM clients, etc, and shows where to get the updates.

The Secunia checkup uses Java, so if you don't have Java installed yet, get Java Runtime Environment (JRE) 6.
 

Cheex

Diamond Member
Jul 18, 2006
3,123
0
0
Are all of the issues fixed yet?
I'm not sure if the website detailed everything.
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Originally posted by: Cheex
Are all of the issues fixed yet?
I'm not sure if the website detailed everything.
By "issues," do you mean known security vulns, or do you mean operational issues with 2.x versus 1.5.x?

If you're still on 1.5.x, they've got an update for that as well... I will edit the link in the OP to the all-platforms page, which also has a link to the FF 1.5.0.10 download page. They say they're supporting 1.5.x until April 24, 2007.

 

Mem

Lifer
Apr 23, 2000
21,476
13
81
Also, try the Secunia online checkup on your Windows rigs. It checks for missing security updates for popular software that could be exploited, such as torrent clients, file-compression utilities, media players, browsers, Flash Player, IM clients, etc, and shows where to get the updates.

It is not bad mechBgon,but they need to work on their detection accuracy,

This installation of Macromedia Flash Player 6.x is insecure and potentially exposes your system to security threats!

The detected version installed on your system is 6.0.79.0, however, the latest secure version released by the vendor, fixing one or more vulnerabilities, is 6.0.88.0.

Update Instructions:
Update to version 6.0.88.0 or 9.0.28.0.

Detected wrong version on my Vista x64,I have the latest 9.0.28.0 installed aready,infact I reinstalled latested version to be sure and still gets detected wrong.
 

Noema

Platinum Member
Feb 15, 2005
2,974
0
0
Cool. Updating now. Yesterday morning, while gofing around the Vista RC2, I noticed that 2.0.0.2 was up for grabs at the site, but the autoupdate wasn't detecting the upgrade yet.
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Originally posted by: Mem
Also, try the Secunia online checkup on your Windows rigs. It checks for missing security updates for popular software that could be exploited, such as torrent clients, file-compression utilities, media players, browsers, Flash Player, IM clients, etc, and shows where to get the updates.

It is not bad mechBgon,but they need to work on their detection accuracy,

This installation of Macromedia Flash Player 6.x is insecure and potentially exposes your system to security threats!

The detected version installed on your system is 6.0.79.0, however, the latest secure version released by the vendor, fixing one or more vulnerabilities, is 6.0.88.0.

Update Instructions:
Update to version 6.0.88.0 or 9.0.28.0.

Detected wrong version on my Vista x64,I have the latest 9.0.28.0 installed aready,infact I reinstalled latested version it to be sure and still gets detected wrong.
I know that on WinXP, it found the obsolete .OCX file laying around and reported on that, until I removed it manually.

At any rate, I think most AT'ers know to update their OS and their browsers, but I doubt many of them go on to think "hmm, and next I will check to see if my torrent client, QuickTime, WinAmp, WinRAR, Java, Google Desktop Search, and OpenOffice need security updates this month." So I'm trying to generate some awareness.
 

Lemon law

Lifer
Nov 6, 2005
20,984
3
0
At any rate, I think most AT'ers know to update their OS and their browsers, but I doubt many of them go on to think "hmm, and next I will check to see if my torrent client, QuickTime, WinAmp, WinRAR, Java, Google Desktop Search, and OpenOffice need security updates this month." So I'm trying to generate some awareness.

I very much agree with mechbgon here----but its never a pretty process--and somewhat harps on another question on this thread---namely---originally asked by Cheex--Are all of the issues fixed yet? I'm not sure if the website detailed everything.

The short answer to Cheex's question is a resounding no----browser security is an ongoing process with new vulnerabilities being discovered everyday in all web browsers---and the folks at Secunia somewhat lead the way by being white knight hacker types---who figure out hacks before malicious hackers actually exploit them and feed the leak methodologies to Firefox developers on the Quiet for fixing before anyone actually exploits the security hole.----and with Firefox---you can count on a prompt fix---hence the pain of an upgrade.---because computer security is always a moving target and one only gets more relatively secure by constantly updating

I have been using Firefox since version 1.0 and various Mozilla versions for far longer than that. I can't recall a single upgrade to any version of mozilla---now Seamonkey--or Firefox that has not caused a limited number of people some serious problems. And the folks with upgrade problems need to get themselves to the mozilla forums.
http://forums.mozillazine.org/

For as long as I can remember---I have not been in the folks with upgrade problems camp---but my upgrade from Firefox 2.0.0.1 to 2.0.0.2 was a finally a problem for me. On my wife's computer it was relatively painless---just open firefox---go to help---check for updates--and download a 744KB update file---Firefox mumbled something about disabling my java but installed easily. My computer was another story---the 744KB file downloaded but refused to install---forcing me to reboot--then Firefox wanted to download some 7MB fixit updater which totally locked firefox---after a reboot I downloaded the less than 6 MB 2.0.0.2 installer package from the Firefox website using Seamonkey---I went to add remove programs--and removed Firefox 2.0.0.1---and then tried to install Firefox 2.0.0.2---I got past the agree to the EULA---but then the install hung mid way---again locking up my computer. I finally booted into safe mode---and was finally able to complete the install---which then grumbled about my java version jre 1.6.0--b105. I later found the problem posted on the mozilla forums---really a defect in the java version which is programmed to recognize mozilla 2.0.0.0---but nothing after that.

Even if I had a problem---I am not angry or discouraged with Firefox--its just the price of computer security---some patience required---but never pleasant for the easily frustrated.

 

SuPrEIVIE

Platinum Member
Aug 21, 2003
2,538
0
0
im still using 1.5 and they just updated it, whats weird is that i cant find that version on their website anymore?
 

Lemon law

Lifer
Nov 6, 2005
20,984
3
0
Then---SuPrEIVIE---then you need to get yourself to the mozilla forums to find the answers---and for the record---my link is now fixed.
 

stash

Diamond Member
Jun 22, 2000
5,468
0
0
Originally posted by: Cheex
Are all of the issues fixed yet?
I'm not sure if the website detailed everything.
No, the issues are not all confirmed to be fixed.

There is still a critical memory corruption vuln that was supposed to be fixed in this release, but a Mozilla spokesperson says that the fix was not included.

According to this page it was: http://www.mozilla.org/security/announce/2007/mfsa2007-01.html

But it apparently wasn't: http://securitywatch.eweek.com/open_sou...l_the_firefox_flaws_hunted_down_1.html
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
Also, I don't think the process is ever really done. The bugs they found, the bugs they don't know about yet, the bugs the bad guys find first... just do your updates promptly and run software at non-Admin level when practical, to put the remaining issues (known or unknown) in somewhat of a cage.

Also, whether it's WinXP or Vista, fully enable your hardware Data Execution Prevention like this pic shows :camera:. You bought it, might as well use it :D
 

corkyg

Elite Member | Peripherals
Super Moderator
Mar 4, 2000
27,370
239
106
Got it! Not problems. I guess that's good? :)