SUMware
Premium
join:2002-05-21
edit:
May 7th, @11:26PM
| reply to Steve
Only Vietnamese language pack addon is affected
Here's the rest:
"Everyone who downloaded the most recent Vietnamese language pack since February 18, 2008 got an infected copy. While we cannot determine the exact number of compromised downloads, there have been 16,667 total downloads of the Vietnamese language pack since November 2007, so we anticipate the impact on users to be limited.
Mozilla does virus scans at upload time but the virus scanner did not catch this issue until several months after the upload. We are also adding after-the-fact scans of everything to address this sort of case in the future.
A new language pack will be available shortly. Until then, Vietnamese language pack users should disable this package using the add-ons dialog on the Tools menu.
More information is available in bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=432406"
According to Bugzilla the affected file was removed from public staging prior to 2008-05-06 11:06:44 PDT. |
|
Steve
SAS-70 is extortion
Consultant
join:2001-03-10
Tustin, CA
| said by SUMware  :Only Vietnamese language pack addon is affected The point is not to get everybody to check their installations - I didn't download this pack and don't know anybody who did. Most people weren't affected.
This reveals a shocking lack of quality control. We're lucky it was "only" a Vietnamese language pack.
--
Stephen J. Friedl | Unix Wizard | Microsoft Security MVP | Tustin, California USA | my web site |
|
KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK | Chances are they don't know Vietnamese, so they farmed out the translation to some third party who caused the problem. |
|
