A French security testing company has found two holes in the latest version of Firefox that it rates as 'critical'.
The vulnerabilities could allow hackers to implant code in a web page that would create a batch/exe file with a malicious payload such as a Trojan or key-logger on the PC of anyone viewing the site, warned testers at the French Security Incident Response Team (FrSIRT).
"The Mozilla Foundation partially patched this issue on the server side by adding random letters and numbers to the install function, which will prevent this exploit from working," said FrSIRT, which posted the alert on Saturday.
FrSIRT rates the flaws as critical and has posted proof-of-concept exploit code on its website.
The Mozilla Foundation said in a statement: "Mozilla is aggressively working to provide a more comprehensive solution to these potential vulnerabilities and will provide that solution in a forthcoming security update.
"Users can further protect themselves today by temporarily disabling JavaScript or disabling the 'Allow websites to install software' option in Tools > Options > Web Features."
Position # 397874 IP Network Administrator Location - Reading Job Description: There is a requirement for an IP network administrator to join the Infrastructure Services operational support team to manage the movement of network resources, ... more >
Job Description: A skilled System Integrator to integrate application hosting environments to support business requirements. The Candidate will possess specific experience of enterprise systems, component validation and integrating technical Infrastructures and system management facilities within ... more >
Liverpool, United Kingdom | South Liverpool Housing Group
Head of Information, Communication & Technology - £38,950 - £41,000 + benefits - Liverpool The SLH Group is a housing association responsible for 3,400 homes in Speke and Garston - two of Liverpool's most challenging ... more >
Central London, United Kingdom | MI5 Security Service
Communications Centre Engineer - Competitive salaries + excellent benefits - Central London Getting the best out of technology is critical to helping us protect the UK. Join MI5 and use your skills and experience to ... more >More job opportunities
Print
Discuss
Send to friend
RSS feeds
Daily news podcast
Hackers able to take complete control of affected PCs 10 May 2005
Over 2.6 million downloads in March, and a claimed 44 million in total 14 Apr 2005
del.icio.us
Digg this
reddit!
