caveman_nige
11th March, 2009, 02:14 PM
Mozilla reported more vulnerabilities in its Firefox web browser last year than Internet Explorer, Safari, and Opera combined but Mozilla dealt with those flaws quicker than Microsoft, according to a new report.
Firefox had 115 reported flaws in 2008, nearly four times as many as every other popular browser, and nearly twice as many as Microsoft and Apple combined, according to browser vulnerability research released this week by vulnerability-testing company Secunia. In comparison, Microsoft reported 31 flaws in IE, Apple reported 32 in Safari, and Opera reported 30.
However, the report found Mozilla was quicker to patch Firefox's flaws that were disclosed publicly without vendor notification, compared with Microsoft. These "zero day" vulnerability disclosures contain information that can be used by attackers to write exploits for the flaw. The longer it takes vendors to release an update that repairs the vulnerability, the longer users of the browser are at risk.
Secunia reported six incidences in which Microsoft was publicly notified of browser vulnerabilities, two of which the security company labelled as "high" or "moderate" in severity. Meanwhile, Mozilla experienced three such occurrences, all of which Secunia labelled as "less critical" or "not critical".
Microsoft took 110 days to issue patches for the two most serious flaws, while it took Mozilla an average of 43 days to address its three flaws, Secunia reported. One of the IE vulnerabilities remained open for 294 days in 2008, according to the report.
The revelation comes as Mozilla released an update Wednesday to Firefox, its second in about a month. Mozilla developers said the update fixes six critical vulnerabilities found in Firefox 3.0.6, the most serious of which could allow attackers to run arbitrary code on a victim's computer.
Firefox continues to chip away at Internet Explorer's market dominance. Mozilla now has 21.77 per cent of the global browser market share, compared with IE's 67.44 per cent, a drop of more than seven percentage points in a year, according to figures from web metrics company Net Applications.
Browser wars. The top ten alternatives to IE from Firefox to Chrome
Photos: Top 10 alternatives to Internet Explorer - Software - Breaking Business and Technology News at silicon.com (http://software.silicon.com/applications/0,39024653,39323842-1,00.htm)
Firefox had 115 reported flaws in 2008, nearly four times as many as every other popular browser, and nearly twice as many as Microsoft and Apple combined, according to browser vulnerability research released this week by vulnerability-testing company Secunia. In comparison, Microsoft reported 31 flaws in IE, Apple reported 32 in Safari, and Opera reported 30.
However, the report found Mozilla was quicker to patch Firefox's flaws that were disclosed publicly without vendor notification, compared with Microsoft. These "zero day" vulnerability disclosures contain information that can be used by attackers to write exploits for the flaw. The longer it takes vendors to release an update that repairs the vulnerability, the longer users of the browser are at risk.
Secunia reported six incidences in which Microsoft was publicly notified of browser vulnerabilities, two of which the security company labelled as "high" or "moderate" in severity. Meanwhile, Mozilla experienced three such occurrences, all of which Secunia labelled as "less critical" or "not critical".
Microsoft took 110 days to issue patches for the two most serious flaws, while it took Mozilla an average of 43 days to address its three flaws, Secunia reported. One of the IE vulnerabilities remained open for 294 days in 2008, according to the report.
The revelation comes as Mozilla released an update Wednesday to Firefox, its second in about a month. Mozilla developers said the update fixes six critical vulnerabilities found in Firefox 3.0.6, the most serious of which could allow attackers to run arbitrary code on a victim's computer.
Firefox continues to chip away at Internet Explorer's market dominance. Mozilla now has 21.77 per cent of the global browser market share, compared with IE's 67.44 per cent, a drop of more than seven percentage points in a year, according to figures from web metrics company Net Applications.
Browser wars. The top ten alternatives to IE from Firefox to Chrome
Photos: Top 10 alternatives to Internet Explorer - Software - Breaking Business and Technology News at silicon.com (http://software.silicon.com/applications/0,39024653,39323842-1,00.htm)