Firefox 3.6.3 Critical Security Update Released, Update Now

Saturday, April 03, 2010

Mozilla is a initial web browser vendor to fix a disadvantage exploited during this year’s CanSecWest Pwn2Own contest.Just one week after a U.K.-based hacker known as “Nils” pennyless in to a64-bit Windows 7 appurtenance with a Firefox vulnerability, a open-source group shipped Firefox 3.6.3 to plug a confidence hole.

The latest Firefox 3.6.3 refurbish refurbish fixes this criticalsecurity disadvantage in Firefox 3.6.2. This is a rarely recommended refurbish for all Firefox 3.6.2 users.
From Mozilla Foundation Security advisory:
A memory corruption flaw heading to formula execution was reported by confidence researcher Nils of MWR InfoSecurity during a 2010 Pwn2Own contest sponsored by TippingPoint’s Zero Day Initiative. By relocating DOM nodes in between papers Nils found a box where a moved node wrongly defended a old scope. If garbage collection could be triggered during a right time afterwards Firefox would later use this freed object.
As this exploit only affects Firefox 3.6 version, that includes Firefox 3.6, Firefox 3.6.1 and Firefox 3.6.2, so all users regulating these versions of Firefox should refurbish their chronicle to a latest immediately.
Firefox 3.6.3 refurbish is accessible around a in-built automatic refurbish check. Users can also download fromthe official Mozilla Firefox website.

0 comments: