Mozilla working on critical Firefox patch

By

Mozilla is readying a patch for a widely publicised critical flaw in its Firefox web browser.

Attack code to exploit the vulnerability, written by security researcher Guido Landi, appeared on several security websites on Wednesday.

The code could be modified by attackers to dupe users of the unpatched browser into viewing a malicious XML file that is then used to install unauthorised software.

The flaw is thought to affect all releases of Firefox 3.0, the most recent version of the browser, running on all popular operating systems, including Linux.

Mozilla had not responded to requests for comment at the time of writing, but a Firefox security developer said that the company is working on a patch.

The patch will be issued as part of Mozilla's upcoming Firefox 3.0.8, which is slated for release between 30 March and 1 April.

The patch has been characterised as a "high-priority fire drill" security update, because the attack code has been released publicly.

Such code rarely gets released into the wild, but this does not necessarily slow down the hackers, as the CanSecWest security conference proved last week.

Fully patched versions of Firefox, Safari and Internet Explorer all failed its annual hacking contest.

Mozilla working on critical Firefox patch
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Rio Tinto AI tool aids defect elimination in rail operations

Rio Tinto AI tool aids defect elimination in rail operations

Curtin University makes headway on 'radical' tech shakeup

Curtin University makes headway on 'radical' tech shakeup

GO Markets chases former CIO over IT contracts

GO Markets chases former CIO over IT contracts

Salesforce blocks AI rivals from using Slack data

Salesforce blocks AI rivals from using Slack data

Log In

  |  Forgot your password?