gHacks technology news » firefox patch http://www.ghacks.net A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Tue, 24 Nov 2009 23:31:44 +0000 http://wordpress.org/?v=2.8.6 en hourly 1 Critical Security Vulnerability In Firefox 3.5 http://www.ghacks.net/2009/07/15/critical-security-vulnerability-in-firefox-3-5/ http://www.ghacks.net/2009/07/15/critical-security-vulnerability-in-firefox-3-5/#comments Wed, 15 Jul 2009 12:01:02 +0000 Martin http://www.ghacks.net/?p=14412 firefoxA critical security vulnerability affecting Firefox 3.5 has been discovered and published on the security portal Milw0rm entitled Firefox 3.5 Heap Spray Vulnerability. A proof of concept exploit has been provided. In short, the vulnerability can lead to remote code execution. The good news is that a security patch has already been published by Mozilla Links.

The security vulnerability can be fixed the following way. Type in about:config in the Firefox address bar and hit enter. Now filter for the term javascript.options.jit.content and double-click it afterwards to set it to false which disables the Tracemonkey JavaScript engine. This in turn could (and most likely will) reduce the JavaScript performance of the Firefox 3.5 web browser until an official security patch is provided by the Mozilla Firefox team.

The security patch is expected to be released soon by the Firefox development team. Stay tuned, we keep you updated.

Tags: , , , , , ,

Related posts

]]> http://www.ghacks.net/2009/07/15/critical-security-vulnerability-in-firefox-3-5/feed/ 10 Firefox 2.0.0.14 critical update http://www.ghacks.net/2008/04/17/firefox-20014-critical-update/ http://www.ghacks.net/2008/04/17/firefox-20014-critical-update/#comments Thu, 17 Apr 2008 07:28:24 +0000 Martin http://www.ghacks.net/?p=3832 Firefox 2.0.0.14 has been released and is currently available through the automatic update function in Firefox and the main Mozilla website. The new update to Firefox 2 is a security update that fixes one critical issue, a crash in the JavaScript garbage collector which is actually more of a stability fix than a security fix. The reason why it is still listed as a security fix is that issues like these have been exploited before in the past.

I suggest you update your version of Firefox 2 as soon as possible, users of Firefox 3 seem safe for now and do not have to do anything. The same issue will also be fixed in upcoming releases of Thunderbird and Seamonkey which are not yet available for download.

Tags: , , , ,

Related posts

]]> http://www.ghacks.net/2008/04/17/firefox-20014-critical-update/feed/ 2