Wed, 15 Jul 2009 Firefox 3.5 vulnerable to critical Javascript attack

Firefox 3.0 users who haven't yet upgraded shouldn't be vulnerable to this flaw

Erik Larkin PC World

A critical flaw in the way Firefox 3.5 handles Javascript opens the door to a serious attack, according to Secunia, which tracks security vulnerabilities.

Sample exploit code is already available online, so while there aren't yet any reports of active attacks against this new flaw, there soon could be. Such an assault would likely take the form of a poisoned Web page that uses behind-the-scenes attack code to trigger the flaw.

The Washington Post's Security Fix has posted a workaround to protect against the flaw while Mozilla prepares a patch. The temporary fix disables a new Javascript processing feature in Firefox 3.5, which Security Fix says will slow down Javascript handling but protect against this exploit.

See Brian Krebs' post for instructions.

Firefox 3.0 users who haven't yet upgraded shouldn't be vulnerable to this flaw, and won't find the setting that Krebs describes.

Check out our new Macworld Mobile site.

Follow Macworld UK on twitter: www.twitter.com/macworlduk

RSS
Digg

Email A Friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Permalink This Article

This articles permalink is:
http://www.macworld.co.uk/digitallifestyle/news/index.cfm?RSS&NewsID=26598

<<prev article | back to news index | next article>>

Click here for the latest reader comments

Latest News

More news...

iPhone 3G S Video Review

Related News

More Digital Lifestyle news...

Mac Broadband?

Search news

Search Google

Newsletter signup

It's easy and free to get the latest news headlines, reviews and opinions straight to your email inbox. Sign up NOW to make sure you receive the latest Mac news, reviews and tutorials on your favourite topics.

Latest issue: Macworld

Find out what's in this month's Macworld here or buy now.

Macworld reader poll

Have you upgraded to Snow Leopard?:

View poll results

Have your say in the
Macworld forums!

Register now

Stay on top of the latest, breaking Mac news and chat with other Mac professionals and enthusiasts about the issues that matter to you. Register with Macworld today to join our forums and receive our twice-weekly email newsletter, Macworld Mainline.

RSS

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.

Subscribe to our feeds here

Latest PC industry news

MACWORLD MARKETPLACE

	Computer & Laptop At Ciao you can read consumer reviews on a large number of Apple products like iPods, iPhones, Apple laptops and Apple computers. Compare prices of your favourite Apple products today.
	Orbitsound Orbitsound is a British technology and consumer electronics company, we specialises in designing and manufacturing innovative high quality audio products featuring its revolutionary airSOUND® single point stereo technology. With Orbitsound products (T3,T6 and the T12) everywhere is the sweet spot
	Circus Ponies NoteBook - the easy way to get organized on the Mac NoteBook is the award-winning application that gets you organized. Store notes in electronic notebooks, add text, drag in files, "clip" web pages and other content. Annotate with diagrams, sketches, highlighting, keywords, even voice recordings. Find anything instantly with NoteBook’s patented Multidex^TM. Publish to the web, including MobileMe.
	50% off ebooks It doesn't get much hotter than Mac OS X and iPhone development - visit http://apress.com/mac. Whatever your level, and whatever your background, Apress offers a complete package of books to get you up and developing for iPhone and Mac OS X. Use the exclusive MacWorld coupon code, MACWORLDOC, at Apress.com to receive 50% off your cart.
	World's most secure PIN protected portable hard drive The Amacom Data Locker is the only portable hard drive which is 100% platform independent with all of its security measures being performed within the device itself. With no software or drivers to install the Data Locker's unique authentication system eliminates the threat of infected systems, keyboard loggers or brute force attacks.
	FREE 30-day trial. Announcing New FileMaker Pro 10. Sleek new look. Intuitive new design. Learn about the fresh, new interface and innovative features in FileMaker® Pro 10, the leading easy-to-use database software, which will make managing your information easier than ever.
	Beat the Credit Crunch - Lease your Mac from Hardsoft. Hardsoft are the only 'one stop' solution for the supply and finance of I.T. to businesses throughout the UK via our regional branch offices. We are uniquely both equipment Apple Approved Reseller and licensed Credit Brokers and have tailored a solution which includes a full 3 year warranty and an equipment upgrade every 18 month.
	Latest Version of Final Cut Studio and Final Cut Server now available - Special Offer !! The UK's leading Apple Solution Experts for the Broadcast, Digital Pro Audio and Creative industries. Experts in SAN Servers and Storage, call now to discuss your next edit suite, studio or Mac workstation. 24hour Pro Support and 0% finance available.