Firefox, Mozilla vulnerable to 1998 flaw

Reports by Danish security firm Secunia indicate both Mozilla and Firefox browsers are susceptible to a flaw first discovered in 1998.

A malicious coder could use the Old Frame Injection Trick vulnerability to spoof a legitimate Web site, and gather personal information from users tricked into visiting and interacting with the spoofed site, reports Webpronews.

Secunia rates the flaw as moderately critical and confirms it exists in Firefox 1.0.4 and Mozilla 1.7.8.

Mozilla has recommended users to close all other tabs in the window before visiting a site where personal information will be entered.

An MSN Web site was taken offline after Microsoft learned of a flaw that could let hackers gain access to hotmail accounts, reports CNET.

According to a Microsoft representative, http://ilovemessenger.msn.com contained a cross-site scripting flaw.

Cross-scripting flaws are errors in Web site design, not in Web browsers, and were discovered more than five years ago. Microsoft has described the flaws as serious security vulnerabilities.

"The 'I Love Messenger` Web site has been disabled," said a Microsoft representative in an e-mail statement.

The Federal Aviation Administration has given United Airlines regulatory approval for WiFi access to be offered on domestic flights in the US.

Verizon Airfone will offer the wireless service for passenger and crew use, reports AFP.

"Our research shows that connecting to the Internet is customers` most preferred form of communication to the ground, and this certification is a crucial step to bring this in-flight wireless access to our customers," says United Airlines senior VP for marketing Dennis Cary.

America Online (AOL) has launched AIM Mail, the Internet service provider`s first venture into free Web-based e-mail, in an attempt to compete with the likes of Hotmail, Yahoo Mail and Gmail.

AOL will provide 2GB of free storage, free anti-virus scanning and anti-spam filtering, reports Information Week.

AIM Mail will be rolled out across AOL`s AIM user base this week.