Symantec: Mozilla-based browsers increasingly targeted by hackers
In the past, Internet Explorer has been targeted most often because of its widespread use
Computerworld - The growing popularity of Mozilla-based Web browsers appears to be attracting the attention of the malicious hacking community.
Between July 1, 2004, and Dec. 31, 2004, the number of documented vulnerabilities affecting the Mozilla browser and Mozilla's Firefox browser was higher than the number of vulnerabilities affecting Microsoft's Internet Explorer, according to the latest Internet Security Threat Report from Symantec Corp released today.
The report, which provides an update of Internet threat activity worldwide every six months, noted 13 vulnerabilities affecting Internet Explorer. That compared to 21 vulnerabilities affecting the Mozilla and Mozilla Firefox browsers during the survey period.
Internet Explorer, however, still had a higher proportion of serious vulnerabilities, with nine of the 13 flaws rated as highly severe. By comparison, 11 of the 21 Mozilla browser flaws were deemed highly severe, and just seven of Firefox flaws were seen as highly severe. The Internet Explorer flaws also took longer to fix -- an average of 43 days, compared to 26 days for Mozilla browsers.
"We are starting to see Firefox and Mozilla get more attention from attackers, and that is likely to continue," said Alfred Huger, senior director of engineering at Symantec. "People who are writing Trojans and worms that get distributed via Web browser vulnerabilities are looking for the highest yield."
Historically, Internet Explorer has been the most targeted browser because of its widespread use, but that could begin to change as Mozilla browsers gain popularity, he said. Since 1997, Symantec has documented 313 vulnerabilities for Internet Explorer, and less than 100 for Mozilla browsers.
Symantec's study, based on information gathered from over 20,000 sensors deployed on customer networks in 180 countries, also noted a continuing rise in the number of new vulnerabilities discovered. Between July 1 and Dec. 31, 2004, Symantec documented 1,403 new vulnerabilities -- 13% more than the 1,237 vulnerabilities found in the first six months of 2004. Out of these, nearly half -- or 670 flaws -- affected Web-connected applications, a 39% increase over the first six months of 2004.
Nearly 97% of the newly discovered flaws were rated as being of moderate to high severity, while 70% were reported as being easy to exploit.
In a break from recent trends however, malicious attackers also appeared to be taking more time to exploit new vulnerabilities. In the latest study, the time it took hackers to exploit new flaws rose on average to 6.4 days, compared to 5.8 days previously.
Read more about Security in Computerworld's Security Topic Center.
- Troubleshooting Common Issues in VoIP Learn more about Voice over Internet Protocol (VoIP), including common VoIP metrics used, best practices in VoIP management and tips and tricks for...
- 2013 Network Management Software (NMS) Buyers Guide This white paper contains an independent comparison study of six different network management solutions and provides guidance on how you can choose the...
- Rightsizing Your Network Performance Management Solution: 4 Case Studies This white paper discusses challenges encountered as organizations search for the most cost-effective network performance management solution.
- Global Growing Pains: Tapping into B2B Integration Services to Overcome Global Expansion Challenges A recent survey by IDG Research explored both the challenges and pain points companies face when growing globally, as well as the capabilities...
- E-Signature RFP Checklist Webcast If your organization is looking to adopt e-signatures, you may be overwhelmed by the number of providers that offer seemingly similar solutions. How...
- Cloud and Collaboration: Driving Your Business Value Mission Critical Cloud from Peer 1 Hosting is enterprise-grade. All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!