Security researchers have warned that Firefox has unpatched “extremely critical” security holes and exploit code already circulating the Internet.
A patch is expected shortly, but in the meantime users can protect themselves by switching off JavaScript. In addition, the Mozilla Foundation has now made the flaws effectively impossible to exploit by changes to the server-side download mechanism on the update.mozilla.org and addons.mozilla.org sites, according to security experts.
The flaws were confidentially reported to the Foundation on 2 May, but by Saturday details had been leaked and were reported by several security organisations, including the French Security Incident Response Team (FrSIRT). Danish security firm Secunia marked the exploit as “extremely critical”, its most serious rating, the first time it has given a Firefox flaw this rating.
Popularity comes at a price.
Source: Techworld
Articles RSS