Firefox Flaw Found and Fixed (Get the Patch)

A critical security flaw in Firefox was disclosed yesterday, and patched today. Now that’s what I call quick service.

The flaw in Firefox was a buffer overflow flaw which allowed remote code execution, if exploited, meaning that people could access your system remotely, and run programs and do other nasty things on your computer, all from afar, and without your knowledge.

The flaw was discovered by independent security researcher Tom Ferris, who reported the flaw to Mozilla. However, according to a CNet report, Ferris “decided to publicly disclose the flaw after a run-in with Mozilla staff.”

“We’d like to make sure that by the time something goes public, we have a solution for the users,” said Mike Schroepfer, a director of engineering at Mozilla, yesterday, explaining that “We believe there is a buffer overflow issue. We are still determining whether it is exploitable by attack.”

Today they released a patch…

[Continue reading Firefox Flaw Found and Fixed (Get the Patch)]