![]() |
PCDVD數位科技討論區
(https://www.pcdvd.com.tw/index.php)
- 系統組件
(https://www.pcdvd.com.tw/forumdisplay.php?f=19)
- - Firefox 2又出現一個阻斷服務安全漏洞
(https://www.pcdvd.com.tw/showthread.php?t=668366)
|
---|
引用:
是測試版的86XX 你用的是9.02 8585吧 |
引用:
這這這...在下才疏學淺,還真想不到"情結"以外的字眼來形容這個現象... :stupefy: 其實...我覺得是因為討厭微軟的人多,所以自然IE7的嘲笑文也多...不過,這又何妨? 反正軟體總是會有漏洞的,誠如Luger版友說的,我目前主要使用的OP也是被發現幾個問題...有曝光總比我們(OP)不知道好... |
嘲笑微軟可以顯示出自己懂軟體
何樂而不為:D |
ㄟ,FFX的漏洞和 ie不可以相提並論好嗎?
IE只要有ActiveX的一天, 永遠比 ffx危險100倍 因為activex等於就是 一般程式 可以對你的電腦做任何的事 ffx的漏洞再怎麼搞了不起讓你電腦LAG 不會搞到自動下載程式並無聲無息執行 |
引用:
其實這樣說也有點怪怪的,沒有ActiveX,很多功能也不能用,例如網路ATM 相反的也可以說FF漏洞很多,只要你下載到內含惡意軟體的擴充套件就完蛋了,因為你也沒辦法確認那個擴充套件有沒有BUG或木馬,開放原始碼並不保證安全,就連apache也出現過木馬 另外你總不會說因為Word 漏洞很多,大家改用PE2就不會有漏洞了,沒漏洞和沒功能總是要挑一個犧牲 |
拜託樓主不要只'看'片面之辭
Taiwan.CNET.com的新聞 如果長期觀察會發現 M$的銀彈攻勢(****?)有時會左右 新聞的報導取向 麻煩你看下: Mozilla反駁Firefox 2漏洞說 看看FF方面的說明 平衡一下報導 |
引用:
oToKo 提供的訊息就是 Mozilla rebuts Firefox 2 bug reports 的中文版本。發布於 10 月 25 日。 以下是第一篇的英文版本,發布於 11 月 1 日。 Another denial-of-service bug found in Firefox 2 By Joris Evers, CNET News.com A second security flaw that could cause the new Firefox 2 browser to crash has been publicly disclosed. The vulnerability lies in the way the open-source browser handles JavaScript code. Viewing a rigged Web page will cause the browser to exit, a representative for Mozilla, the publisher of the software, said Wednesday. Contrary to claims on security mailing lists, the bug cannot be exploited to run arbitrary code on a PC running Firefox 2, the representative said. This flaw in the JavaScript Range object is different from the denial-of-service vulnerability in Firefox 2 that was confirmed by Mozilla last week. That bug is related to a more serious security hole, which was fixed in earlier versions of Firefox, the organization has said. The two "crashers" are the only publicly released vulnerabilities that have been confirmed by Mozilla in the week since Firefox 2 was launched. The issues are only minor, the organization has said. By contrast, Microsoft's Internet Explorer 7 update suffers from a spoofing flaw, discovered a week after Microsoft released IE 7 on Oct. 18. The vulnerability could help crooks mask phishing scams, the type of attack Microsoft designed the browser to thwart. According to Secunia, a security monitoring company, there are at least two other vulnerabilities in IE 7. Microsoft has disputed these issues, saying that one reported problem lies in Outlook Express, not IE 7, and the other is a part of the product design, not a flaw. Release of the new Web browsers set off a race among bug hunters to come up with the first security hole in either program. So far, though, none of the reported flaws could be exploited to hijack a PC running the browser, the most serious type of vulnerability. |
所有的時間均為GMT +8。 現在的時間是09:27 PM. |
vBulletin Version 3.0.1
powered_by_vbulletin 2025。