Firefox 2, 3 updated to fix 'carpet bomb' attack
updated 04:35 pm EDT, Thu July 17, 2008
Firefox 2 and 3 updates
In an unusual move, Mozilla has released updates to two versions of its Firefox web browser. The current browser has been updated to v3.0.1, while its otherwise outdated predecessor has been updated to 2.0.0.16. One of the reasons for the patching is a remedy to a potential "carpet bomb" attack against Windows users, who must have both Safari and Firefox installed on the same computer. The attack also requires that a person actually have Firefox closed, while still running another online application. Having even the unpatched browser up and active will prevent any intrusions.
Mozilla has additionally eliminated a bug in the browser's CSSValue array, which could have been used to generate a crash and execute malware. The bug is said to be in the Thunderbird 2 e-mail client as well, but a patch is not anticipated until July 23rd. In the meantime, worried users can disable Thunderbird's JavaScript support.
Fresh-Faced Recruit
Joined: Oct 2002
not an unusual move!
Mozilla has been known to support a few versions of it's titles at a time and then make announcements as to defunct versions becuase of out-dated rendering engines or support_
MacNN is really going down hill with their blurbs in the past several years!