Firefox 3.5.1 is available now. The issue is fixed in 3.5.1
http://www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.1 If you are using FF 3.5 upgrade it in to 3.5.1 On Thu, Jul 16, 2009 at 9:11 PM, Visakh <[email protected]> wrote: > > Hi, > > This is a security advisory for those who are trying out Firefox > 3.5. A highly critical security vulnerability has been detected in the > TraceMonkey javascript engine. It that allows intruders to hijack the > browser, when users visit sites containing the exploit code. The > exploit code is published on milw0rm malware site - and it could > spread. > > The exploit is based on the just-in-time (JIT) compilation feature > of the new javascript engine. Mozilla security blog recommends that > users disable the JIT feature for the time being, until a fix is > released (FF 3.5.1. Remember to re-enable JIT after the update). This > however doesn't affect versions older than 3.5. For details on the bug > and temporary fix, visit Mozilla security blog: > > http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/ > > Regards, > Gokul Das > > > > > -- With Regards, Anoop P --~--~---------~--~----~------------~-------~--~----~ "Freedom is the only law". "Freedom Unplugged" http://www.ilug-tvm.org You received this message because you are subscribed to the Google Groups "ilug-tvm" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For details visit the website: www.ilug-tvm.org or the google group page: http://groups.google.com/group/ilug-tvm?hl=en -~----------~----~----~----~------~----~------~--~---
