Peaches Posted March 28, 2009 Report Share Posted March 28, 2009 <h2 class="headline">Mozilla Pounces On New Firefox Zero-Day Exploit </h2> Vulnerability discovered in Firefox 3.0.x browsers considered critical Mar 26, 2009 | 02:48 PM By Kelly Jackson HigginsDarkReading A zero-day exploit for Firefox was unleashed online yesterday, but Mozilla didn't waste any time before patching for the critical vulnerability it abuses: The open-source group now has a patch ready for the flaw that will ship with the next Firefox update on April 1. The researcher who discovered the vulnerability yesterday released with it proof-of-concept code. Mozilla developers jumped on it right away, coming up with a fix. The flaw is a remote memory corruption vulnerability that affects all versions of Firefox 3.0.x, and could let an attacker execute malware on a victim's machine or crash the browser, according to the vulnerability report. The user would have to be lured into viewing a malicious file with his Firefox browser. Johnathan Nightingale, whose title at Mozilla is "human shield," says so far Mozilla hasn't seen signs of an exploit in the wild for the bug. The vulnerability affects Windows, OS X, and Linux versions of Firefox 3.0.x. DarkReading - http://www.darkreading.com/security/attack...ttacks/breaches Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.