Computerworld
Quick Menu
Search



Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Symantec: Mozilla-based browsers increasingly targeted by hackers

In the past, Internet Explorer has been targeted most often because of its widespread use
 

Sign up to receive Security Resource Alerts

March 21, 2005 (Computerworld) -- The growing popularity of Mozilla-based Web browsers appears to be attracting the attention of the malicious hacking community.
Between July 1, 2004, and Dec. 31, 2004, the number of documented vulnerabilities affecting the Mozilla browser and Mozilla's Firefox browser was higher than the number of vulnerabilities affecting Microsoft's Internet Explorer, according to the latest Internet Security Threat Report from Symantec Corp released today.
The report, which provides an update of Internet threat activity worldwide every six months, noted 13 vulnerabilities affecting Internet Explorer. That compared to 21 vulnerabilities affecting the Mozilla and Mozilla Firefox browsers during the survey period.
Internet Explorer, however, still had a higher proportion of serious vulnerabilities, with nine of the 13 flaws rated as highly severe. By comparison, 11 of the 21 Mozilla browser flaws were deemed highly severe, and just seven of Firefox flaws were seen as highly severe. The Internet Explorer flaws also took longer to fix -- an average of 43 days, compared to 26 days for Mozilla browsers.
"We are starting to see Firefox and Mozilla get more attention from attackers, and that is likely to continue," said Alfred Huger, senior director of engineering at Symantec. "People who are writing Trojans and worms that get distributed via Web browser vulnerabilities are looking for the highest yield."
Historically, Internet Explorer has been the most targeted browser because of its widespread use, but that could begin to change as Mozilla browsers gain popularity, he said. Since 1997, Symantec has documented 313 vulnerabilities for Internet Explorer, and less than 100 for Mozilla browsers.
Symantec's study, based on information gathered from over 20,000 sensors deployed on customer networks in 180 countries, also noted a continuing rise in the number of new vulnerabilities discovered. Between July 1 and Dec. 31, 2004, Symantec documented 1,403 new vulnerabilities -- 13% more than the 1,237 vulnerabilities found in the first six months of 2004. Out of these, nearly half -- or 670 flaws -- affected Web-connected applications, a 39% increase over the first six months of 2004.
Nearly 97% of the newly discovered flaws were rated as being of moderate to high severity, while 70% were reported as being easy to exploit.
In a break from recent trends however, malicious attackers also appeared to be taking more time to exploit new vulnerabilities. In the latest study, the time it took hackers to exploit new flaws rose on average to 6.4 days, compared to 5.8 days previously.




Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
Mozilla updates Firefox 3.1 with Alpha 2 build
Microsoft explains Seinfeld-Windows TV ad: just a 'teaser'
Mozilla: Firefox is faster than Chrome
More top stories...
iPhone 3G owner sues Apple, AT&T over dropped calls, app crashes
At 10, Google reiterates commitment to CIOs
Analysts: Google spreading itself too thin
Users of Windows XP SP3 who try out IE8 Beta 2 won't be able to uninstall either one under certain circumstances.
Google has gone from innovative upstart to fat-and-happy industry leader in what seems like record time. Preston Gralla explains.
Microsoft's latest beta of IE8 includes better tab management, new services such as Web Slices and Accelerators, and the new 'porn mode.'
These leading-edge graduate schools are moving at the pace of the IT workplace, delivering coursework that's relevant to today's IT professionals.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Business Continuity Zone
The File Data Management Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Business Intelligence and Analytics Zone
Windows Protection Zone
Identity & Security Management Zone

Ads by TechWords

See your link here
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center
Register for this complimentary live webcast today!
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Online Security Issues in Regulated Industries
Download this research paper, free for a limited time, compliments of Webroot!
(Source: Webroot Software) In June 2008, Computerworld invited IT and business leaders to participate in a survey on online security initiatives at their organizations. The goal of the survey was to better understand Web and e-mail security issues faced today within the regulated education, financial services, government and health care industries. The following report represents top-line results of that survey.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Death to PST: Hidden Cost of Email Mismanagement
Extend, Replace, or Convert; which is the best way forward for COBOL Applications?
The Trend from Unix to Linux in SAP Data Centers
View more whitepapers