272468 - Firefox gets a virus viewing this page

Status: VERIFIED INVALID

(Firefox :: General, defect)

Description

[Eric Marsch]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

When you go to any page on this site, my anti-virus detects a download virus.
The anti-virus is mcaffe

Reproducible: Always
Steps to Reproduce:
1.go to the site
Actual Results:  
Anti-virus told me of a virus

Expected Results:  
fix the exploit to stop the virus from being downloaded

Comment 1

[Daniel Veditz [:dveditz] (OOO: back Aug 26)]

The "virus" is actually javascript in the webpage, designed to attack
vulnerabilities in Internet Explorer. This was downloaded into your browser
cache as part of normal processing and there's no way to know malicious scripts
are present prior to downloading the web content.

If Firefox were vulnerable to this attack (JS/Nezew) you would be infected when
we processed the page whether or not we saved a copy in the cache. By saving a
copy your virus detector can warn you, letting you see what the problem is and
whether you might actually be vulnerable.

Comment 2

[Matthias Versen [:Matti]]

verified invalid

The download into the cache doesn't matter (it would be also already to late)
because this is no exploit that affects Firefox.