internetnews.com: Firefox Password Flaw Still Open?

"Is a flaw in the Firefox browser fixed or not? A security research claims that it's not. Mozilla says it is.

"Last November security researcher Robert Chapin discovered a zero day flaw in Mozilla Firefox's password manager. The flaw could potentially allow a maliciously crafted page to auto-fill a form with credentials intended for another site.

"Mozilla claimed that it fixed the flaw in its most recent Firefox 2.0.0.2 update. Chapin doesn't quite agree..."

Complete Story

Related Stories:

• internetnews.com: Mozilla Patches Some Firefox Holes(Feb 26, 2007)
• Computerworld: Firefox Update Postponed by Newest Bug(Feb 21, 2007)
• internetnews.com: Mozilla Takes Aim at Opera Security(Jan 10, 2007)