Firefox Extensions Auto-Update Vulnerability
Posted on May 30, 2007, under Security.
CyberNet News has the description for how someone can attack your Firefox browser using auto-updating extensions as the attack vector:
A new Firefox vulnerability has been discovered, and this time it is quite a doozy. It affects many different extensions including Google Toolbar, Google Browser Sync, Yahoo Toolbar, Del.icio.us Extension, Facebook Toolbar, AOL Toolbar, Ask.com Toolbar, LinkedIn Browser Toolbar, Netcraft Anti-Phishing Toolbar, and PhishTank SiteChecker.