Printed from www.pcpro.co.uk
Critical flaw found in Firefox 3.5
Posted on 15 Jul 2009 at 17:13
A newly-discovered critical flaw in Firefox 3.5's JavaScript compiler could be used to execute malicious code, Mozilla developers have admitted.
According to the Mozilla security blog, the vulnerability in the Just-in-time JavaScript compiler was discovered last week - just over a week after Firefox 3.5 was made available for download. The TraceMonkey JavaScript engine has been patched once already.
"Mozilla developers are working on a fix for this issue and a Firefox security update will be sent out as soon as the fix is completed and tested," Mozilla noted on its security blog.
In the meantime, users can either run Firefox in Safe Mode or disable the compiler. Mozilla provides instructions on disable the compiler on its security blog, but acknowledges that this will hurt JavaScript performance.
The flaw can only be exploited if a Firefox user visits a web page containing malicious code.
Author: Nicole Kobie
advertisement
- Need a bit of extra Christmas cash? Grass up your boss, says BSA
- Photoshop Mobile on Android review: first look
- ATI Radeon HD 5970: 42% more expensive in the UK
- Office 2010 Beta – 32-bit or 64-bit – The Choice is Clear
- Why Britain's watchdogs have fewer teeth than goldfish
- Tabbed documents: how to make Office 2010 great
- Outlook 2010 People Pane – does it spell death to Xobni
- Microsoft Outlook 2010 screenshots
- Co-Authoring in Word 2010 and SharePoint Foundation 2010
- Microsoft Outlook 2010 screenshots: Backstage view
- Getting to grips with Microsoft's IT Health Environment Scanner
- Virtualise your servers
- The changing face of travel gadgets
- Build your own distributed file system
- The bulletproof Dell that costs an arm and a leg
- Microsoft Office 2010 Technical Preview: Q&A
- Lawnmowers, the TyTN II and one odd insurance request
- There'll never be a bulletproof OS
- How far can we trust apps?
- Five nice touches in Outlook 2010
advertisement
