Reports about an unpatched security vulnerability in Firefox 3.6 that has been in existence since the beginning of February have been released on the Internet. Not a lot of information are known about the security vulnerability other than it has been successfully used to exploit Firefox 3.6 on Windows XP SP3 and Windows Vista with the likelihood that other operating systems and Firefox releases are also affected by the vulnerability.
The few facts that are know are the following: The vulnerability is a remote code exection vulnerability that can be used by malicious users to comprise the operating system.
It is however not clear how the exploit works and if it is already in the wilds. Secunia rates the exploit as highly critical without going into further detail as well.
An official statement has not been published yet by the Mozilla developers. It is likely that the increase in reports about the vulnerability will trigger an official response soon. The Mozilla team seems to be aware of the vulnerability according to information posted on The H. (via Download Squad)
Related Articles:
Critical Security Vulnerability In Firefox 3.5Mozilla Patches Critical Security Vulnerability In Firefox 3.6
Firefox 3.6.12 Fixes Critical Security Vulnerability
Another Critical Firefox Vulnerability Emerges
Microsoft warn of Windows Shell Critical Vulnerability
Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook, Twitter or Google+ using the icons below.
i have also heard about this Vulnerability, but this is not really serious for me
Seems like Firefox is following suit of IE8!
Great article! way to go! this is how you confuse everyone out there is it?
You could have at least quoted Secunia’s workaround “Do not visit untrusted websites or follow untrusted links.”. Such a simple workaround…..If everyone followed this, all those “malicious hackers” would simply have to go home:)…
@ Kingpin: nice trolling!
That’s not a real workaround unless you know what the vulnerability is and how it can be exploited. The only workaround is to switch browsers.
Use Linux =)