Firefox 3 fans cry foul as first vulnerability reported

Stephen Withers
Friday, 20 June 2008 02:35

Business IT - Open Source

There's not even any indication of whether the flaw is specific to Firefox on a particular platform, or if all supported operating systems are equally affected.

Mozilla security chief Window Snyder said "This issue is currently under investigation. To protect our users, the details of the issue will remain closed until a patch is made available. There is no public exploit, the details are private, and so the risk to users is minimal."

When TippingPoint receives details of unpatched vulnerabilities, it confirms the issue and may offer a cash payment for exclusive rights. If accepted, the software vendor is notified. If the vendor fails to respond or to provide a fix in "a reasonable period of time", TippingPoint makes a public disclosure.

Meanwhile, it uses the information in its own security products and may share it with other security vendors.