Technology news and Jobs 
VIRTUALISATION Firefox 3.5: new vulnerability, new version
VIRTUALISATION Firefox 3.5: new vulnerability, new version | Firefox 3.5: new vulnerability, new version |
|
| by Stephen Withers | |
| Friday, 17 July 2009 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
Firefox 3.5.1 was released ahead of schedule on July 16 to address the issue with the TraceMonkey just-in-time JavaScript engine. (It wasn't available when I checked this morning [Australian time], but it is now - download it from Mozilla's web site , or use your preferred updating method.) The new problem is described as a "Unicode data remote stack buffer overflow vulnerability", and a proof of concept has been released. A buffer overflows if an excessively long string of data is sent to the document.write method, leading to the possibility of arbitrary code execution or a crash. It's not clear whether Firefox 3.5.1 also contains this vulnerability. The security software on my computers identifies the proof of concept as malware, and I'm not prepared to disable it just to find out. As of this writing, there's no mention of the issue in the Mozilla Security Blog. |
Tags
| < Next story in category | Previous story in the category > |
|---|
