Firefox hit by fewer flaws than IE in 2006
LATEST NEWS
- Kim Dotcom v United States of America || 1
- Facebook CIO is keynote speaker at CIO Summit in June
- IRD tells minister the bad news on FIRST - again || 3
- “Extraordinary secrecy” in briefing to ICT Minister: Labour || 7
- IT should become the fourth science in schools: Orion Health boss || 6
- Fry Up: What did MED tell the Minister? || 1
SUBSCRIBE
Computerworld is New Zealand's only specialised information systems fortnightly. Subscribe now for $100 (23 issues) and save more than 37% off the cover price!
SIGN UP
Mozilla's Firefox suffered from 26% fewer vulnerabilities in the second half of 2006 than Microsoft's Internet Explorer, says report
By Gregg Keizer | Framingham | Thursday, 22 March, 2007
According to Symantec's tally, 40 Firefox vulnerabilities were disclosed between August and December 2006; Internet Explorer (IE), meanwhile, was hit with 54 bugs. Opera and Safari -- the browser Apple bundles with Mac OS X -- had four flaws each.
For all of 2006, however, the numbers were nearly neck and neck: Firefox was nailed by 87 flaws during the 12 months, IE by 92.
The trend line also put Firefox in the better light. The open-source browser had 15% fewer vulnerabilities in the second half of the year compared to the first, while IE's total increased 42% during the period.
"Internet Explorer was particularly affected by concerted efforts to 'fuzz' the browser for new vulnerabilities," says the Symantec report, which cites July's 'Month of Browser Bugs' project as a big contributor. "The majority reported affected Internet Explorer or Windows components accessible through the browser," says Symantec.
To add insult to injury to IE, Mozilla developers patched Firefox five times faster than did Microsoft's. On average, Firefox had an attack exposure window -- the amount of time between the disclosure of a bug and when it was patched -- of just two days based on a sample set of 26 flaws. By comparison, Microsoft took an average of 10 days to patch the sample 15 vulnerabilities. Both vendors' attack windows were a day longer in the second half of the year than in the first six months.
"Web browsers continue to be the big exploit area," says Vincent Weafer, senior director of Symantec's security response team "And they will increasingly be more important as more data reside on the back end, as web applications become more popular."
The most recent data pegged IE's market share at 79.1%and Firefox's at 14.2%. Safari and Opera came in third and fourth, respectively, with 4.9% and 0.79%.
Symantec's twice-annual internet security threat report can be found on the Cupertino, Calif., company's website.
MOST POPULAR
Social Media @Computerworld NZ
Computerworld NZ has now reached LinkedIn! Join to expand your networks and meet others interested in information systems.
