Mozilla Updates Firefox 3.5 for Security, Startup

“The zero-day flaw is a vulnerability in Firefox 3.5’s
Just-in-Time (JIT) JavaScript compiler. Mozilla’s security advisory
describes the vulnerability as “an exploitable memory corruption
problem.”

“Security researcher Simon Berry-Byrne publicly posted
proof-of-concept exploit code for the flaw on Tuesday, potentially
enabling an attacker to execute arbitrary code. Mozilla began
testing a patch for the flaw the same day with its nightly
builds.

“The update is the first security update for Firefox 3.5 which
was released at the end of June.”

Complete Story