• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Firefox 3 suffers its first vulnerability

Highlander

VIP Member
VIP Member
Joined
Jun 1, 2001
Messages
13,283
Likes
142
#1
Less than one day after its launch, Firefox 3 has a vulnerability.

According to Tipping Point's Zero Day Initiative, the vulnerability, which it rates as critical, was reported within the first five hours of Firefox 3's release.

"Once the vulnerability was verified in TippingPoint's DVLabs and acquired from the researcher, the vulnerability was promptly reported to the Mozilla security team," said a representative.

Although the Zero Day Initiative team does not offer specifics until the vendor has a chance to patch it, the blog post did say this vulnerability, which also affects Firefox 2, requires user interaction and could result in an attacker executing arbitrary code.

Mozilla is reported to be working on a fix.

The Zero Day Initiative has been criticized in the past for paying researchers who find vulnerabilities.

source: http://news.cnet.com/8301-10789_3-9972207-57.html?part=rss&subj=news&tag=2547-1_3-0-20