Vista - Firefox tops list of 12 most vulnerable apps

Written by Ryan Naraine @ 10:41 am 12/15/2008


Mozilla’s flagship Firefox browser has earned the dubious title of the most vulnerable software program running on the Windows platform.

According to application whitelisting vendor Bit9, Firefox topped the list of 12 widely deployed desktop applications that suffered through critical security vulnerabilities in 2008. These flaws exposed millions of Windows users to remote code execution attacks.

The other applications on the list are all well-known and range from browsers to media players, to VOIP chat and anti-virus software programs. Here’s Bit9’s dirty dozen:


Read more at the source:
Firefox tops list of 12 most vulnerable apps | Zero Day | ZDNet.com

G'Day Shawn,

So, with Internet Explorers of all versions undergoing a Global meltdown right now, with NO apparent fix or patch event in sight, or even just beyond the horizen, many Users have bitten the bullet, dumped IE and gone to a Browser that in this Forum, a lot of Members have waxed lyrical about, namely Firefox 3.

So where the heck does that leave us now?

sassofalco

Hello Sassofalco,

It leaves us pretty much (see below) until they come out with an update.

My head is already up and around the ' S ' bend!

Lol.

Maybe I'm missing something, but my take is that these are vulnerabilities that have been discovered over the past year and for which patches or fixes have been posted. I have mine all updated, so it seems that things should be OK until the next vulnerability is found. Isn't this the 'game'. Someone finds a vulnerability in the code and then somebody fixes it and an update is issued. From reading the pdf, I take it they are talking more to larger companies that have a hard time getting everyone on their network to stay updated (and by the way we have this software that can help protect your systems from these people.

If I'm missing something (I'm on my first coffee), please forgive me.

Gary

Thanks Gary,

Makes sense, even after the first partial caffeine hit. I never attempt anything until after my fifth. Which reminds me........

sassofalco

Well, you see what I'm drinking above.

Lol.

I suppose that I have to kick IE8 RC 1 to the curb as well, was quite enjoying no crashes and/or hangs for a bit. But my security is more important than supporting Microsoft at the moment.