Test your browser for vulnerabilities: http://bcheck.scanit.be/bcheck/
Scanit's Browser Security Test automatically checks your browser for various security problems.
Just ran a test with my Opera 9.22. It did 40 test and 0 vulnerabilities found.
1
Browser security test
Started by CeeCee, Jul 20 2007 07:23 PM
7 replies to this topic
#2 OFFLINE
-
- Members
-
- 111 posts
Advanced Member
- Gender:Male
- Interests:Computer Technician
Posted 20 July 2007 - 07:57 PM
Ran mine on Mozilla FireFox 2.0.0.5.
No vulnerabilities found.
No vulnerabilities found.
#3 OFFLINE
-
- Moderators
-
- 7,935 posts
Just another volunteer
- Gender:Male
- Location:England: NE Coast
Posted 20 July 2007 - 08:51 PM
Nice link CeeCee, bookmarked it.
The Legend Of Woody Guthrie
How To Get Into Safe Mode | Returnil 2008 | Sandboxie | ERUNT GUI | TestDisk | MiniTool Partition Wizard - Home Edition
How To Get Into Safe Mode | Returnil 2008 | Sandboxie | ERUNT GUI | TestDisk | MiniTool Partition Wizard - Home Edition
#4 OFFLINE
-
- Members
-
- 100 posts
Advanced Member
- Gender:Male
- Location:Texas
Posted 20 July 2007 - 09:17 PM
I guess I don't understand it. It says I have 1 medium risk vulnerability "Mozilla XMLSerializer Same Origin Policy Violation Vulnerability (bid5766)" and recommends I should upgrade to Mozilla 1.0.2 or later. The only Mozilla app I'm using is FireFox 2.0.0.5 so I don't know what I'm supposed to do.
#5 OFFLINE
-
- Members
-
- 2,952 posts
Cydonian Knight
- Gender:Male
- Location:England
Posted 20 July 2007 - 09:59 PM
That was posted a while back I think. Never used to work for me on Firefox but works now. Not sure how much use it is though - FF passes, IE passes, I even fired up the sodding awful AOL browser and that passed 
#6 OFFLINE
-
- Members
-
- 1,079 posts
Power Member
- Gender:Male
Posted 20 July 2007 - 11:10 PM
It was posted about 12 to 18 months ago from what I remember JD, and from what I remember all the browsers that I tried passed it, so the results are almost pointless.
My sites:
getit.me.uk | Get It on Facebook
youtubeartists.co.uk | YouTube Artists on Facebook | YouTube Artists on Twitter | YouTube Artists on YouTube
getit.me.uk | Get It on Facebook
youtubeartists.co.uk | YouTube Artists on Facebook | YouTube Artists on Twitter | YouTube Artists on YouTube
#7 OFFLINE
-
- Members
-
- 1,626 posts
Lets Get Dangerous
- Gender:Male
- Location:QLD,Australia
- Interests:PC, LOTRO
Posted 21 July 2007 - 12:36 AM
Since their latest security news is from 2005 I consider this a bit out of date.....
Actually I tried this back then as well, lets see how I go this time.
Same as last time 1 risk:
Actually I tried this back then as well, lets see how I go this time.
Same as last time 1 risk:
Quote
Medium Risk Vulnerabilities
Mozilla XMLSerializer Same Origin Policy Violation Vulnerability (bid5766)
Description
This bug can allow a malicious web site to access your data on other web sites. For example it can be used to read you mail from a web mail system.
Mozilla is an open source browser. From Netscape 6 onwards, Mozilla's source code has been used to create Netscape browser. As a result, Netscape suffers from many of the same vulnerabilities as Mozilla.
Other browsers, such as Galeon, Phoenix, Camino (Chimera) also use Mozilla's source code and can be vulnerable too.
Technical Details
XMLSerializer object can be created by JavaScript code and used to serialize XML (or HTML) documents. serializeToStream method does not enforce same origin policy.
It is possible to open a document in a different domain and then use serializeToStream method to get the contents of the document.
Recommendations
Mozilla XMLSerializer Same Origin Policy Violation Vulnerability (bid5766)
Description
This bug can allow a malicious web site to access your data on other web sites. For example it can be used to read you mail from a web mail system.
Mozilla is an open source browser. From Netscape 6 onwards, Mozilla's source code has been used to create Netscape browser. As a result, Netscape suffers from many of the same vulnerabilities as Mozilla.
Other browsers, such as Galeon, Phoenix, Camino (Chimera) also use Mozilla's source code and can be vulnerable too.
Technical Details
XMLSerializer object can be created by JavaScript code and used to serialize XML (or HTML) documents. serializeToStream method does not enforce same origin policy.
It is possible to open a document in a different domain and then use serializeToStream method to get the contents of the document.
Recommendations
- Netscape users need to upgrade to Netscape 7.01 or later to fix this vulnerability.
- Mozilla users need to upgrade to version 1.0.2 or later
- Galeon users - upgrade your Mozilla installation to version 1.0.2 or later and upgrade to Galeon version that supports it (1.2.6 or later)
- Phoenix users - upgrade to Phoenix 0.5 or later
- Camino (Chimera) users - upgrade to version 0.7
fireryone
There are 10 types of people in this world.
Those who understand binary, and those who don't.
There are 10 types of people in this world.
Those who understand binary, and those who don't.
#8 OFFLINE
-
- Members
-
- 139 posts
Advanced Member
Posted 25 July 2007 - 06:56 PM
CeeCee, on Jul 20 2007, 03:23 PM, said:
Test your browser for vulnerabilities: http://bcheck.scanit.be/bcheck/
Scanit's Browser Security Test automatically checks your browser for various security problems.
Just ran a test with my Opera 9.22. It did 40 test and 0 vulnerabilities found.
Scanit's Browser Security Test automatically checks your browser for various security problems.
Just ran a test with my Opera 9.22. It did 40 test and 0 vulnerabilities found.
