It was just yesterday that Mozilla reported a Critical vulnerability in Firefox 3.5 and Firefox 3.6. As of this posting, although the release notes for Firefox version 3.6.12 are live, the update is not yet available on the servers. (Edit Note: The update is available now.)
Firefox users are advised to follow the instructions below from the Mozilla advisory to disable Javascript and install NoScript.
"Issue:
Mozilla is aware of a critical vulnerability affecting Firefox 3.5 and Firefox 3.6 users. We have received reports from several security research firms that exploit code leveraging this vulnerability has been detected in the wild.
Impact to users:
Users who visited an infected site could have been affected by the malware through the vulnerability. The trojan was initially reported as live on the Nobel Peace Prize site, and that specific site is now being blocked by Firefox’s built-in malware protection. However, the exploit code could still be live on other websites.
Status:
We have diagnosed the issue and are currently developing a fix, which will be pushed out to Firefox users as soon as the fix has been properly tested.
In the meantime, users can protect themselves by doing either of the following:
- Disabling JavaScript in Firefox
- Using the NoScript Add-on"
To manually check for the update, click Help and Check for Updates.
References:
- Critical vulnerability in Firefox 3.5 and Firefox 3.6
- Firefox hit by critical zero-day vulnerability
- Release Notes
Clubhouse Tags: Clubhouse, Security, Updates, Information
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
No comments:
Post a Comment