Firefox 3.6.3 Critical Security Update Released, Update Now

Friday, April 02, 2010

Mozilla is a initial web browser vendor to repair a disadvantage exploited during this year’s CanSecWest Pwn2Own contest.Just a single week after a U.K.-based hacker known as “Nils” broke in to a64-bit Windows 7 appurtenance with a Firefox vulnerability, a open-source group shipped Firefox 3.6.3 to plug a confidence hole.

The ultimate Firefox 3.6.3 refurbish refurbish fixes this criticalsecurity disadvantage in Firefox 3.6.2. This is a rarely recommended refurbish for all Firefox 3.6.2 users.
From Mozilla Foundation Security advisory:
A mental recall crime smirch leading to formula execution was reported by confidence researcher Nils of MWR InfoSecurity during a 2010 Pwn2Own contest sponsored by TippingPoint’s Zero Day Initiative. By relocating DOM nodes in between papers Nils found a case where a changed node wrongly defended its old scope. If rubbish collection could be triggered during a right time afterwards Firefox would after make use of this freed object.
As this exploit usually affects Firefox 3.6 version, which includes Firefox 3.6, Firefox 3.6.1 and Firefox 3.6.2, so all users using these versions of Firefox should refurbish their chronicle to a ultimate immediately.
Firefox 3.6.3 refurbish is accessible around a in-built involuntary refurbish check. Users can also download fromthe central Mozilla Firefox website.

0 comments: