> Quoting iDEFENSE Labs <labs-no-reply@xxxxxxxxxxxx>: > > > iDEFENSE Labs have confirmed The Mozilla Organization's Mozilla 1.7.1 > > and 1.7.3, as well as Firefox 0.10.1 are vulnerable to this > > issue. A check on the source code for Firefox 1.0 suggests it is also > > vulnerable. It is suspected that all previous versions of both browsers > > are vulnerable. > > Don't you mean 1.0.1 and not "0.10.1" as the vulnerable version of Firefox? No, they meant 0.10.1, the Firefox Preview Release from last fall. Firefox 1.0.1 contains a fix (as will Mozilla 1.7.6) and has just been released. -Dan Veditz Mozilla Security Group
