Monday, February 26, 2007

Critical JavaScript Flaw Hits Firefox

Shaun Nichols writes on vnunet.com:

Mozilla has confirmed a potentially serious flaw in its open source Firefox browser.

Developer Michal Zalewski, who uncovered the flaw, described it as " seemingly pretty nasty, and apparently easily exploitable".

The vulnerability affects current versions of Firefox for all major PC platforms, according to Zalewski's report.

The use of a certain JavaScript instruction can cause Firefox to crash, allowing an attacker complete access to a system and the ability to run malware remotely.

More here.

Note: Once again, I recommend the NoScript plug-in for Firefox.

0 Comments:

Post a Comment

<< Home