This latest patch is a fast one from the Mozilla team. I posted information about the vulnerability yesterday and today I’m posting patch information.

You have a choice of how to install the patch. The easy way is to visit this link  with Firefox.

If you want to verify the fix, do the following:

• In Firefox Click Help -> About Mozilla Firefox and verify that the user agent string contains “(noIDN)”
• In the Mozilla Suite Click Help -> About Mozilla and verify that the user agent string contains “(noIDN)“

A more complicated way is to do it manually:

1. Type about:config into the address field and hit Enter.
2. In the Filter toolbar, type network.enableIDN.
3. Right click on the the network.enableIDN item and select toggle to change value to false (or double click on it to change it).
4. Close the browser (and all other instances of it) and restart it to apply the patch.

To verify that the browser is patched do the following:

• Type about:config into the address field and hit Enter.
• In the Filter toolbar, type network.enableIDN.
• Ensure that the the value for this item is set to false.

Take this opportunity to upgrade Firefox to Firefox 1.0.6 for the best security.

News of this patch is spreading quickly - the Washington Post  has already picked up on it!

Quickly bookmark Mozilla patches Firefox at
                                        

This entry was posted by the PC Doctor on Saturday, September 10th, 2005 at 14:27 and is filed under Stay Secure. Responses are currently closed, but you can trackback from your own site.