Critical flaw found in Firefox 3.5

A newly-discovered critical flaw in Firefox 3.5’s JavaScript compiler could be used to execute malicious code, Mozilla developers have admitted.

Critical flaw found in Firefox 3.5

According to the Mozilla security blog, the vulnerability in the Just-in-time JavaScript compiler was discovered last week – just over a week after Firefox 3.5 was made available for download. The TraceMonkey JavaScript engine has been patched once already.

“Mozilla developers are working on a fix for this issue and a Firefox security update will be sent out as soon as the fix is completed and tested,” Mozilla noted on its security blog.

In the meantime, users can either run Firefox in Safe Mode or disable the compiler. Mozilla provides instructions on disable the compiler on its security blog, but acknowledges that this will hurt JavaScript performance.

The flaw can only be exploited if a Firefox user visits a web page containing malicious code.

Disclaimer: Some pages on this site may include an affiliate link. This does not effect our editorial in any way.

Todays Highlights
How to See Google Search History
how to download photos from google photos