SECURITY PATCH Issued for FireBug [Archive]

View Full Version : SECURITY PATCH Issued for FireBug

ReyBango

5 Apr 2007, 6:26 AM

Hi guys,

A security patch has been issued by Joe Hewitt for FireBug, the popular FireFox extension for debugging JavaScript and Ajax applications. I know this will impact many of you so I've decided to post it here:

More details can be found here:

http://www.getfirebug.com/blog/2007/04/04/security-update/

Rey....

brian.moeskau

5 Apr 2007, 7:47 AM

Great to know, thanks a lot Rey.

jay@moduscreate.com

5 Apr 2007, 8:33 AM

Thanks, updated FB right away!

ReyBango

5 Apr 2007, 8:52 AM

No prob guys. This is actually a VERY nasty vulnerability so I hope everyone updates. More details here about the bug:

http://www.gnucitizen.org/blog/firebug-goes-evil

:(

BernardChhun

5 Apr 2007, 9:34 AM

hey thanks for the hint!

that was a serious security hole :s

Arikon

6 Apr 2007, 3:18 AM

Another bug found in Firebug.
http://larholm.com/2007/04/06/more-0day-in-firebug/

You must update Firebug to 1.04 to fix it.