Mozilla Firefox 3.0 may be new but it might not be secure. Just five hours after Mozilla's release of the updated Web browser Tuesday, researchers at TippingPoint detected a critical security vulnerability in Firefox 3.0, allowing remote attackers to take control of a user's PC.
In addition to Firefox 3.0, the security flaw also affects previous versions of Firefox 2.0x.
As with most zero-day vulnerabilities, remote attackers could execute malicious code on a user's computer if they successfully exploited the flaw, according to a TippingPoint blog post. Consequently, TippingPoint researchers designated the error with a "high" severity rating.
However, like most browser-based vulnerabilities, a successful attack would also require active user participation. An attacker would have to entice a user to click on a malicious link sent in a phishing e-mail or to visit a malicious Website for the user's computer to become infected.
According to the company's Zero-Day Initiative Website, TippingPoint has already contacted Mozilla regarding the issue and a fix is currently in the works. However, the exact patch release date remains to be determined.
Once the vulnerability is repaired, TippingPoint said it planned to publish the security advisory on the "Published Advisory" page on its Website.
"Working with Mozilla on past security issues, we've found them to have a good track record and expect a reasonable turnaround on this issue as well," said TippingPoint.
|
Symantec's Code Red: The Law Enforcement/Anonymous E-Mail Exchange Law enforcement officials negotiated via e-mail for more than two weeks with an Anonymous group member trying to extort $50,000 from Symantec to keep stolen product code off the Internet. |
|
How To Sell IT Security Services To Your Customers Cyberattacks can cost a business thousands, even millions, of dollars, and can deal a death blow to some. Here's how IT solution providers can help guard against malicious attacks. |
|
Cybersecurity Experts: What They Know Could Scare You A recent report based on interviews with security experts in government, business and academia finds more than half in agreement that a worldwide arms race is taking place in cyberspace. |
 More
Slide Shows |
- Insider Threats: The Next Frontier for Security Resellers and SMBs
- Complete Security and Your Bottom Line: Sophos, Value and the Channel
- Tough Threats, Tougher Security: How You Can Leverage New Solutions To Combat A “Targeted Attack” Landscape
- Dark Clouds Ahead: Why the Mid-Market Needs To Ramp Up Cloud Security and How You Can Help Them Get There
