According to a message posted over the weekend on the Full-Disclosure mailing list, the latest version of Firefox, 2.0.0.5, contains a password management vulnerability that can allow malicious Web sites to steal user passwords. If you have JavaScript enabled and allow Firefox to remember your passwords, you are at risk from this flaw.
The Mozilla team fixed a similar flaw last November, one which did not require JavaScript. The heise Security Web site contains a demo/proof of concept of the vulnerability risk that you can use to determine your vulnerability.
Tags: firefox, password management, risk, javascript
Related posts:
{ 2 comments… read them below or add one }
Thank you so much for writing about this one Gayla!! I think you just saved me from a huge head ache!!
Yes, thanks for the heads up! I will be changing that funtion on my browser!