firefox 1.07 exploit

[Nuob]

http://www.whitedust.net/speaks/1432/

[PrntRhd]

Another potential problem, but not seen in the wild. An exploit is something found in the wild, not a laboratory. ALL browsers have flaws.

Secunia has rates the flaw "Not Critical".
http://secunia.com/advisories/17071/
NOTE: The vendor has concluded that the weakness is caused due to an infinite recursion which causes a stack overflow, which only can be exploited to crash a vulnerable browser and cannot be exploited for code execution.
What that means is you might have to close and restart Firefox when it crashes it.
The new Firefox 1.5 should go Final and release in about two weeks and which does not have the reported flaw.

[pop pop]

I agree with PrntRhd, it's a tempest in a teapot. It's also not a DoS attack as the original source identified it.

There are two great big differences between this type of "vulnerability" in FireFox and an equivalent in Internet Exploder. Often when IE crashes, it takes the whole OS along with it because it's embedded so deeply courtesy of M$. FireFox won't do that, at least not in this case and in fact I've never had a FireFox issue take down a PC. The second point is the patch turn around time. I think it took less than a week for Mozilla and the development community to get a fix out for the last "vulnerability". M$ has never been able to do that, nor would they if they could.

[PrntRhd]

Actually I would rather users like Nuob would post or ask if they see articles like this, at least it shows some concern for security, and that is not all bad vs the alternative.
In this case the Secunia links I quoted were referred to further into the article Nuob posted, and one should always check beyond one article or blog posting to get the bigger picture of the problem's severity.
Zero-day exploits are the greatest fear for those of us who live on the Internet. (flaws that there are no fixes for and have severe consequences for the end-user)