Here the fix for the Gecko spoofing vulnerability

[elaich]

1. Open up your compreg.dat file which is found in your profile directory.

2. Use "find" to find any instance of "IDN." There should be three
instances, 2 of them in the same line.

3. Put the symbol # in front of both lines, marking them as comments rater
than executables.

4. Save the file. When you restart the browser, IDN will no longer in use
and the spoof will not work.

You go here to check it:

http://www.shmoo.com/idn/

You will now get a site not found box when you click on the spoofed links.

 

[Vrodok the Troll]

1. Open up your compreg.dat file which is found in your profile directory.

2. Use "find" to find any instance of "IDN." There should be three
instances, 2 of them in the same line.

3. Put the symbol # in front of both lines, marking them as comments rater
than executables.

4. Save the file. When you restart the browser, IDN will no longer in use
and the spoof will not work.

You go here to check it:

http://www.shmoo.com/idn/

You will now get a site not found box when you click on the spoofed links.

Works nice. Thank you

 

[Zo]

Works nice. Thank you

Poster forgot to mention that if you install any extensions or theme's, you have
to do the fix again, because the compreg.dat file updates itself back to the
original setting. A more permanent fix is being worked on.

Zo

 

[jason]

1. Open up your compreg.dat file which is found in your profile
directory.

Okay I'm behind in my reading, but I take it this is unique to Firefox and
doesn't affect Mozilla? (I don't have a compreg.dat file in Mozilla.)

 

[elaich]

Okay I'm behind in my reading, but I take it this is unique to Firefox
and doesn't affect Mozilla? (I don't have a compreg.dat file in
Mozilla.)

It affects almost every browser BUT IE, even Opera. ALL of the Gecko
based browsers. IE is too stupid to use IDN.

I don't know if that's funny or downright sad.

 

[jason]

It affects almost every browser BUT IE, even Opera. ALL of the Gecko
based browsers. IE is too stupid to use IDN.

Okay thanks. I had looked for "compreg.dat" under C:\WINDOWS\Application
Data\Mozilla\Profiles. But it turns out it's in Program Files