|
Firefox 2.0 has a vulnerability that can leave its users susceptible to an identity theft attack, according to Aviv Raff, a security researcher based in Israel.
Raff outlined a bug in Firefox that allows spoofing and enables an attacker to conduct phishing attacks, by tricking the user to believe that the authentication dialog box is from a trusted website. The versions affected include Firefox v2.0.0.11 and prior versions. Ryan Naraine got a private demo of Raffs work and noted that this attack is easy to fall for.
|