[Web4lib] Help - Browser Hijack? Webpage hijack?

[Thomas Dowling]

> At 4:55 PM -0700 7/12/05, Smith, Sarah wrote:
> 
>>One of the librarians in my system says that when he goes to the
>>following pages - in FIREFOX only - he gets garbage. For one page he
>>gets a display of CSS (but not the page's CSS; someone else's) and on
>>other pages he gets what looks to me like what happens when you open an
>>image with a text editor


Sellers, Minna wrote:
>> Here's an alert regarding recent vulnerabilities for Firefox:
> http://www.frsirt.com/english/advisories/2005/1075 .  A newer version is
> available at  http://www.mozilla.org/products/firefox/ . 


While it's smart to move to Firefox 1.0.5 at your earliest opportunity,
there are no reports that any of the 1.0.4 security holes were ever
exploited.  In otherwords, upgrade your browser, but don't assume that
that addresses this problem in any way.

BTW, is there a chance the person who reported the problem is going
through a firewall or gateway that messes up HTTP headers?  Going by the
 reported symptoms, it sounds like Firefox was receiving data as
text/plain when in fact it was something else.  Unlike You Know Who,
Mozilla-based browsers follow the rules and take Content-type headers at
face value.


Thomas Dowling
tdowling at ohiolink.edu