JavaScript Bug Patched By Mozilla In Firefox 2.0.0.14
Mozilla updated its Firefox web browser on Wednesday in response to the discovery of a vulnerability involving its Javascript Garbage Collector function. The vulnerability means that memory corruption might be caused through specially-crafted Javascript code. Successful exploitation creates a means to execute arbitrary code on vulnerable systems.
Fixes for security problems in the JavaScript engine described in MFSA 2008-15 (CVE-2008-1237) introduced a stability problem, where some users experienced crashes during JavaScript garbage collection. This is being fixed primarily to address stability concerns. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail.
The vulnerability is reported in version 2.0.0.13 of the popular open source browser. Earlier versions may also be affected. Surfers are advised to update to version 2.0.0.14.
Users running Firefox can call up the browser’s built in updater, or wait for the automatic update notification, which typically appears within 24 to 48 hours after Mozilla posts a new version.
More on CyberInsecure:
Posts
Leave a Reply
Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.