Firefox 3 Vulnerability Found

[Peter]

A new vulnerability has been found within Firefox 3. The vulnerabilty it seems was known about prior to release however the person who found it decided not to post it until the browser was released. The vulnerability enables an attacker to take over a users pc and is considered a high severity bug.

Just hours after the official release of the latest refresh of Mozilla’s flagship browser, an unnamed researcher has sold a critical code execution vulnerability that puts millions of Firefox3.0 users at risk of PC takeover attacks.

http://blogs.zdnet.com/security/?p=1288

 

[kceleb9]

Why would anyone be surprised by this? FF3 is a HUGE amount of new code - and from what i've seen is still quite unstable.

It will get better in 5-6 patch releases - but it is not there yet. Some good new features and ideas - but just needs to mature.

People are hilarious how religious they are in their love of FF - it is just a piece of code... sometimes it's blind adherance to standards over sound design logic is the picture of stupidity.

It will get there - but don't rush into FF3

 

[Jim_]

Firefox 3 offers many improvements from v2. Anyone who blindly refuses to upgrade out of fear needs to find a better excuse. :/ I'd be willing to bet that each and every one of you is running software that's vulnerable to code execution by way of a buffer overrun.

The exploit being reported here is currently private. That means that the few people who have it are people who have money and would be willing to pay for it (spammers). Unless you go around clicking on links to sites with malicious content regularly or are a primary target for spammers (idiots), you don't have much to worry about.

Also, Firefox 3 has been running pretty stable on my machine. No more memory leaks when I have a lot of tabs open. :tu:

 

[Ben]

Remember, this vulnerability affects older versions of Firefox too. You're no safer staying with FF2, so you might as well upgrade *cough*to Opera*cough* :p.