While the Mozilla suite version 1.7.12, and Firefox 1.0.7 both address the IDN buffer overflow security issue, it should be noted that the next generation Firefox 1.5b1 was released just prior to the availablity of the patch. If you have tried Firefox 1.5b1, and just can't go back to the 1.0.x version (hey, I'm with you), the problem is easily resolved. The following work around has been posted by Mozilla:
1. Type about:config into the address field and hit Enter.
2. In the Filter toolbar, type network.enableIDN.
3. Right click on the the network.enableIDN item and select toggle to change value to false.
To verify the fix, be sure to restart the browser and then follow these steps.
1. Type about:config into the address field and hit Enter.
2. In the Filter toolbar, type network.enableIDN.
3. Ensure that the the value for this item is set to false.
Regards,
Sander
-----------------------------------------------------------
"Sander Nyman"<2sanderDESPAM@DESPAMsbcglobal.net>
----------------------------------------------------------- I don't want to achieve immortality through my work. I want to achieve it through not dying. - Woody Allen
Source: OS2VOICE