Firefox Linux, Feci bir açık

Bu arada Firefox 1.0.7 de çıkmış,
http://205.188.221.241/pub/mozilla.org/firefox/releases/1.0.7/win32/en-US/Firefox%20Setup%201.0.7.exe

Specific changes in Firefox 1.0.7

* Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens
* Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only)
* Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement
* Fix to restore InstallTrigger.getVersion() for Extension authors
* Other stability and security fixes
http://www.mozilla.org/projects/security/known-vulnerabilities.html#Firefox

Burada Türkçe'si vardı ;)
http://www.mozilla.org.tr

Nerde cokluk orda bokluk.

Mozilla Web browsers are potentially more vulnerable to attack than Microsoft's Internet Explorer, according to a Symantec report.

http://news.com.com/Symantec+Mozilla+browsers+more+vulnerable+than+IE/2100-1002_3-5873273.html?part=rss&tag=5873273&subj=news

URLs passed on the command line are parsed by the shell (bash).
bugzilla da yazan bu cumleden anladiginiz ' http://local\ [komut] deyince komutun calisacagi' mi? anladiginiz diyorum cunku orda bu sekilde bir ornek yok.

Evet oradan anladim,

sizin de tahmin edebilecegini gibi bash' in parse ettigi bir stringten istenilen sey execute edilebilir.