Technology news and Jobs 
VIRTUALISATION Firefox 3.5 zero-day exploit revealed
VIRTUALISATION Firefox 3.5 zero-day exploit revealed | Firefox 3.5 zero-day exploit revealed |
|
| by Stephen Withers | |
| Wednesday, 15 July 2009 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
According to the Denmark-based company, "The vulnerability is caused due to an error when processing JavaScript code handling e.g. 'font' HTML tags and can be exploited to cause a memory corruption." The vulnerability was originally disclosed by Simon Berry-Brown via milw0rm.com. His proof of concept appears to open the calculator on Windows systems. According to SecurityFocus, the proof of concept works on Windows XP SP2 but simply causes a crash under SP3. Judging by a discussion on Mozilla's Bugzilla bug-tracking system, this issue relates to a bug that had already been identified and fixed by the time Berry-Brown revealed his exploit, although the fix has yet to be incorporated into a released version of the open-source browser. Firefox 3.5.1 was expected this month. The appearance of the proof of concept may spur an early release, even if some other known bugs remain unfixed. According to some reports, the Noscript extension provides protection against this issue. Noscript can be used to allow the execution of JavaScript only if it originates from a trusted site. |
Tags
| < Next story in category | Previous story in the category > |
|---|
