1

pcworld.com - 7/15/2009

External Link: Beware of Firefox 3.5 Javascript Vulnerability

— pcworld.com — PC World reports on a critical security bug discovered within the TraceMonkey JavaScript engine used in Firefox... 3.5. The vulnerability can be exploited by an attacker to hijack a machine, though users must first visit a malicious Web site that contains the exploit code. Older versions of ... (more) External Link: Beware of Firefox 3.5 Javascript ...

Firefox

Comments vote downundo vote up adamengst posted 7/15/2009posted this

Leave a Comment

Firefox 3.5 vulnerable to critical Javascript attack
Macworld — ... . A critical flaw in the way Firefox 3.5 handles Javascript opens the door to a serious attack, according to Secunia , which tracks security vulnerabilities. Sample exploit code is already available online, so while there aren't yet any reports of active attacks against this new flaw, there soon could be. Such an assault would likely take the form of a poisoned Web page that uses behind-the-scenes attack code to trigger the flaw. The Washington Post's Security Fix has posted a workaround to protect against the flaw while Mozilla prepares a patch. The temporary fix disables a ...

Security vulnerability found in Firefox 3.5
MacFixIt — ... arbitrary code. The vulnerability is confirmed in version 3.5. Other versions may also be affected." Possible solution From Secunia: "Solution: Set "javascript.options.jit.content" to "false" by opening about:config. Do not browse untrusted websites or follow untrusted links." As always, be sure to create stable backups of your data regularly. Expect to see a patch for this vulnerability in the next few days from Mozilla. Resources Read more about the Firefox vulnerability at Secunia's Web site . Experiencing problems? Have feedback? ...

Security vulnerability found in Firefox 3.5; Update: fixed with 3.5.1
MacFixIt — ... arbitrary code. The vulnerability is confirmed in version 3.5. Other versions may also be affected." Possible solution From Secunia: "Solution: Set "javascript.options.jit.content" to "false" by opening about:config. Do not browse untrusted websites or follow untrusted links." As always, be sure to create stable backups of your data regularly. Expect to see a patch for this vulnerability in the next few days from Mozilla. Resources Read more about the Firefox vulnerability at Secunia's Web site . UPDATE: A new version of Firefox (3.5.1) is available that addresses this ...