Mozilla confirms critical security flaw in Firefox 3.5
By Percy Cabello
Mozilla has confirmed a critical security vulnerability disclosed yesterday by Milworm, that may lead to remote code execution.
As it is related to the new TraceMonkey JavaScript optimizer, users can mitigate it by temporarily disabling the optimizer. To do so:
- Enter about:config in the location bar to access advanced preferences.
- Look for javascript.options.jit.content and double click it to set it to false.
Mozilla reports that they are already working on a fix for the flaw and it will be released as soon as it becomes available.
Firefox 3.5.1 due this week to fix security and slow startup bugs - Mozilla Links
[...] has confirmed that it will release the first update for Firefox 3.5 later this week to address a critical security vulnerability disclosed a couple of days ago that could lead to malicious code [...]