+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities (/Thread-Mozilla-Firefox-75-Is-Out-With-Fixes-For-RCE-vulnerabilities)
Pages:
1
2
Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Mr.Kurd - 04-13-2020
In The Name OF Allah
Al-Salam Alekum
![[Image: Firefox-75.png]](https://latesthackingnews.com/wp-content/uploads/2020/04/Firefox-75.png)
Hello guys?! How are you doing, looks like our loved browser released another version..
Quote:Mozilla recently disclosed numerous security bugs in their Firefox browser. These include several RCE vulnerabilities in Firefox and Firefox ESR.
In the case of Firefox, the most important bug was a high-severity flaw CVE-2020-6821 leading to information disclosure.
Firefox ESR also exhibited two high-severity flaws affecting Android devices. The first of these CVE-2020-6828 was an Android takeover bug. Regarding this vulnerability, Mozilla explains in its advisory,
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user’s profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI.
The Source
Wa Salam Alekum
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - mothered - 04-13-2020
Coincidentally, my FF browser just updated to this around an hour ago.
It's excellent that they're keeping up-to-date with the latest (major) threats.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Drako - 04-13-2020
I'm considering ditching Firefox for a smaller project. They've recently began sending data back to their servers about the default browser on all machines, even if telemetry and sending data to Mozilla is turned off. Which goes against their values of privacy for the end user.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Oni - 04-14-2020
Pretty spooky. Assuming this wouldn't affect Chrome/Brave.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - mothered - 04-14-2020
(04-14-2020, 04:30 AM)Oni Wrote: Assuming this wouldn't affect Chrome/Brave.
Given Tor Is based on Firefox, I'll be Interesting to see whether that's affected to some degree.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Mr.Kurd - 04-14-2020
(04-13-2020, 03:38 PM)mothered Wrote: Coincidentally, my FF browser just updated to this around an hour ago.Yep, they are doing well and keeping it up to date.
It's excellent that they're keeping up-to-date with the latest (major) threats.
(04-13-2020, 06:21 PM)Drako Wrote: I'm considering ditching Firefox for a smaller project. They've recently began sending data back to their servers about the default browser on all machines, even if telemetry and sending data to Mozilla is turned off. Which goes against their values of privacy for the end user.
I'm not sure about that tho, any source for that? but also it is actually something very little to affect privacy. Don't you agree with me?
(04-14-2020, 04:30 AM)Oni Wrote: Pretty spooky. Assuming this wouldn't affect Chrome/Brave.
Did you get any new updates recently? and Does it have Facebook container same as latest release of FF. I mean the Brave.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Drako - 04-14-2020
(04-14-2020, 11:01 AM)Mr.Kurd Wrote: I'm not sure about that tho, any source for that? but also it is actually something very little to affect privacy. Don't you agree with me?
I guess it really doesn't. But if Mozilla can get away with a small privacy intrusion, they could implement even more in the future. For now I'll keep using Firefox. It's a great main-stream browser, for now.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - mothered - 04-14-2020
(04-14-2020, 11:01 AM)Mr.Kurd Wrote: Yep, they are doing well and keeping it up to date.
Firefox Is pretty good In this respect.
They tend to update It quite regularly.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - partiniu - 04-15-2020
Let's do ths. I've always preferred firefox to chrome though, and i still stand by this.
RE: Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities - Tany Sri - 04-23-2020
Interesting and helpful one.