Monday, March 30, 2009
Firefox Update 3.0.8 to Fix Unpatched Security Flaw
Posted by Jeff Campbell in "Apple Software (OS X)" @ 12:00 PM
"Online attack code has been released targeting a critical, unpatched flaw in the Firefox browser. The attack code, written by security researcher Guido Landi was published on several security sites Wednesday, sending Firefox developers scrambling to patch the issue. Until the flaw is patched, this code could be modified by attackers and used to sneak unauthorized software onto a Firefox user's machine."
Mozilla has the fix written and they expect to have it available for download next week. This bug affects not only Mac OS but Linux, and can trick a user into installing unauthorized software after viewing a coded XML page. Good to know they stay on top of these things, guess that is the benefit of making these types of things public. Flip side is that it lets hackers know there is a problem they can exploit. But I guess if it was a hacker that was into this type of thing, they would already know about it.