Firefox 3.5 at Risk from Javascript Vulnerability
Posted on
by
Peter James
The latest version of the Firefox web browser, version 3.5, has a Javascript vulnerability that Secunia is calling highly critical. Brian Krebs at the Washington Post says, “it is the type of flaw that criminals could use to remotely install rogue software, merely by convincing users to visit a hacked or booby-trapped Web site.”
A post on the Mozilla Security Blog explains how to turn off Javascript to be protected from attacks that exploit this vulnerability. They also note that, “Mozilla developers are working on a fix for this issue and a Firefox security update will be sent out as soon as the fix is completed and tested.”