Mozilla developer Daniel Holbert, who reported the problem was discovered on July 20 that the fix to the plugin parameter array crash that had been introduced in the earlier Firefox build (3.6.7) unleashed a crash that showed signs of memory corruption. As an effect of this, the plugin instance’s parameter array could be freed too soon in some cases, leaving a dangling pointer that could be called by the plugin.
This translates into the risk of executing attacker-controlled memory. The previous bag of stability and security fixes had been dropped in the web browser less than a week ago when version 3.6.7 of Firefox has been released, fixing plenty of critical vulnerabilities. These could have been exploited to launch remote code execution attacks.
An attacker successfully exploiting them could have gained control over the computer and, depending on the privileges of the logged user, install programs, view or change data. With version 3.6 continuing to improve both security and stability, Mozilla is also looking in perspective and adds new features in the upcoming Firefox 4.
Firefox also make available Firefox 4.0 Beta 3 pre-release. The new tab management feature introduced by Firefox approaches tab grouping according to your tasks. It allows you to gather tabs on the same subject of interest into a single group.
To download latest version of Firefox 3.6.8 visit here.
No comments:
Post a Comment