Numerous Security Flaws in Web Browsers Remain Unpatched

Advanced Search

February 23, 2005 Numerous Security Flaws in Web Browsers Remain Unpatched A Web Exclusive from WinInfo Mark Joseph Edwards WinInfo InstantDoc #45493 WinInfo	Email this Article Printer Friendly Reader Comments Digg This Del.icio.us RSS
Subscribe to Windows IT Pro \| See More Security Articles Here \| Reprints \| Or get the Monthly Online Pass—only $5.95 a month!

Dozens of security-related problems remain unpatched in Internet Explorer, Firefox, and Opera Web browsers. According to security solution provider Secunia who tracks vulnerabilities in over 4000 products, some of the unpatched browser vulnerabilities are considered to be either moderately or highly critical.

Secunia's reports show they're currently tracking 63 advisories for Internet Explorer 6 . Of those advisories, 41 of the problems have been either corrected or partially corrected by patches from Microsoft. One of the problems is correctable with workarounds. The remaining 21 security problems remain unpatched, the oldest of which was reported in March of 2003.

The reports show that of the 8 advisories tracked for Firefox , 6 of the problems remain unpatched while the remaining 2 have either been completely or partially corrected with patches from the Mozilla Foundation. The oldest unpatched vulnerability in Firefox is dated August 2004.

Secunia currently tracks 33 advisories for Opera 7.x, where 30 of those problems have been corrected by patches from Opera Software. The remaining 3 problems, the oldest of which is dated October 2004, remain unpatched.

End of Article

Reader Comments

"8 advisories tracked for Firefox".
Quite alarming for a fresh 1.0 browser... :-/
Where are the updates? There's no updated binaries to install.

And compared to the MSIE 6 "63 advisories". MSIE6 is now an old browser with no major updates apart from WinXP SP2.

Anonymous User February 24, 2005 (Article Rating:

)

This certainly shows Opera in a positive light (which as an Opera user I'm rather pleased by!). Particularly when you look at the three outstanding issues and find that two are fixed in the imminent 8.0 release (in beta for ages now) and the other is not actually a 'flaw' in Opera per se, but rather their correct implementation of the fundamentally flawed IDN system.

I'll never understand why Firefox is such a media darling and Opera so overlooked, and I don't see anything here to explain this either. Oh well!

Anonymous User February 24, 2005

-Firefox has NO vulnerabilities rated above "moderate". Both IE & Opera have "extreme" & "high" critical flaws.
-altho I didn't see a breakdown, I doubt either Opera or Firefox exhibit these vulnerabilities outside the windoze platform.
-why is Firefox a darling? because of good marketing, good "genes" (from Firebird), a happy & well-embedded user community, the free version doesn't do ads or "nag-ware" (unlike the free version of Opera)...shall I go on?

Anonymous User February 24, 2005 (Article Rating:

)

There are lies, damned lies and statistics.

Number of "issues" in mozilla is 8. none of them are highly or extremely critical. 2 moderate and 6 not critical.

Number of extremely and highly critical issues with IE is 26.

Microsoft gets the high "resolved" percentage by resolving stupid trivial issues. Further the fix from Mozilla/FF will work on all platforms including Win98. Mircosoft counts as "fixed" if it is fixed in WinXP.

As I said, there are lies, damned lies and statistics.

Anonymous User February 24, 2005

Considering that the content of this article really didn't serve much purpose to begin with and was rendered out of date in less than 24 hours by the release of Firefox 1.0.1, maybe Mark Joseph Edwards could just spare us all and pull a Hunter S Thompson now.

Anonymous User February 24, 2005 (Article Rating:

)

I must say I'm a but annoyed that FireFox 1.0 hasn't detected the availability of Firefox 1.0.1 yet. And the Secunia web site is deliberately vague about what version it is referring to, or what the impact of the "Partial Fixes" is.

i.e. Does a moderate vulnerability that is "Partially fixed" remain a "moderate" vulnerability or does it get downgraded to "low"?

There seems to be a lot of FUD being generated here.

DonnEdwards February 28, 2005 (Article Rating:

)

You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now

Top Viewed ArticlesView all articles

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

WinInfo Short Takes: Week of November 9, 2009

An often irreverent look at some of the week's other news, including some more Windows 7 sales momentum, some Sophos stupidity, Microsoft's cloud computing self-loathing, more whining from the browser makers, Zoho's "Fake Office," and much, much more ...

Understanding File-Size Limits on NTFS and FAT

A general confusion about files sizes on FAT seems to stem from FAT32's file-size limit of 4GB and partition-size limit of 2TB. ...

Security Whitepapers Reducing the Costs and Risks of Branch Office Data Protection

Solving Desktop Management Challenges in Healthcare

Solving Desktop Management Challenges in Education

Related Events Introduction to Identity Lifecycle Manager "2"

SQL Server Security: How to Secure, Monitor & Audit Your Databases

Protecting Mobile Users' Data

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format

ADS BY GOOGLE

Job Openings in IT		SPONSORED LINKS		FEATURED LINKS
		EMC SAN vs. DAS Exchange 2007 Calculator Calculate your savings now! Let Your Users Reset Their Own Passwords: Free Download Try a 30 day free trial of Desktop Authority Password Self-Service – it provides an easy-to-use, robust system for allowing users to reset their own forgotten passwords or locked accounts.		Disaster Recovery Strategies – Tips and Tricks Determine how you can achieve your DR objectives as simply and cost-effectively as possible. Get Windows IT Pro & Mark Minasi’s Favorite Power Tools Guide Order Windows IT Pro now and get "More of Mark Minasi's Favorite Power Tools"--a in-depth guide to the most useful Windows commands --FREE with your paid order! Subscribe today, and save 58% off the cover price! Migration, Virtualization, Availability, and Desktop Management Realize the importance of a workload optimization strategy...it can affect your bottom line! Deep Dive into VMware vSphere, eLearning Series Join John Savill to explore the major functionality capabilities of the vSphere virtualization platform, including identification of the changes from ESX 3.5.

Windows IT Pro Home

FAQ for Windows

WinInfo News
Europe Edition

About Us

Contact Us/Customer Service

Media Kit

Affiliates / Licensing

SQL Server Magazine

Office & SharePoint Pro

DevProConnections

IT Job Hound
Left-Brain.com

Technology Resource Directory

asp.netPRO

ITTV

Windows SuperSite

Windows IT Pro is a Division of Penton Media Inc.
© 2009 Penton Media, Inc. Terms of Use | Privacy Statement