Firefox 3.5 vulnerable to critical Javascript attack

The following article is reprinted from the Security Alert blog at PCWorld.com.

A critical flaw in the way Firefox 3.5 handles Javascript opens the door to a serious attack, according to Secunia, which tracks security vulnerabilities.

Sample exploit code is already available online, so while there aren't yet any reports of active attacks against this new flaw, there soon could be. Such an assault would likely take the form of a poisoned Web page that uses behind-the-scenes attack code to trigger the flaw.

The Washington Post's Security Fix has posted a workaround to protect against the flaw while Mozilla prepares a patch. The temporary fix disables a new Javascript processing feature in Firefox 3.5, which Security Fix says will slow down Javascript handling but protect against this exploit. See Brian Krebs' post for instructions. Firefox 3.0 users who haven't yet upgraded shouldn't be vulnerable to this flaw, and won’t find the setting that Krebs describes.

See more like this:
security,
web browsers

"Firefox 3.5 vulnerable to critical Javascript attack" Comments

Macworld's Product Guides

Make Your Dreams Come True!
	Enter for a chance to win $25,000 or your choice of other great prizes in the Dream Come True Sweepstakes brought to you by Macworld. Enter now »