Feeds

Firefox exploit sends Mozilla into 'high-priority fire drill' mode

Two weeks, two exploits

Intelligent flash storage arrays

Mozilla's security team is rushing out a fix for its flagship Mozilla browser following the public release of attack code that targets a previously unknown vulnerability.

The exploit was released Wednesday online. It attacks a vulnerability present on Windows, Mac and Linux versions of the browser and could be used to surreptitiously execute malware on the machines of users who browse booby-trapped websites. The flaw is classified as a boundary condition error that targets Firefox's XML parsing features according to SecurityFocus.

This is the second critical vulnerability in Firefox to come to light in as many weeks. Last week, a master's candidate from the University of Oldenburg in Germany unveiled a separate vulnerability that allowed him to compromise the browser's security. At time of writing, there were no reports that attackers were exploiting either vulnerability, but there's nothing stopping a determined miscreant from modifying Wednesday's release into working attack.

Mozilla intends to fix both vulnerabilities in the version 3.0.8, which is due for release on April 1, Mozilla says here. Mozilla developers are characterizing it as a "high-priority firedrill security update."

As is usually the case, the Firefox add-on NoScript can mitigate attacks against both vulnerabilities. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.