[lotuseclat79]

Firefox Memory Corruption Vulnerability dated July 14, 2009.

Related: Firefox 3.5 Vulnerability Rated 'Highly Critical'

Exploit code for a vulnerability in Firefox was posted online on Monday. Mozilla says it is working on a fix.

-- Tom

[perfume]

Dear lotuseclat79,
Thank you! How far will Sandboxie and GeSWall help in surviving the threats posed by security holes in FF3.5 and IE8?

[lotuseclat79]

Originally Posted by perfume

Dear lotuseclat79,
Thank you! How far will Sandboxie and GeSWall help in surviving the threats posed by security holes in FF3.5 and IE8?

Hi perfume,

I don't know.

-- Tom

[lotuseclat79]

First Zero-Day Exploit Released For Firefox 3.5.

Patch is in the works, exploit code and Metasploit attack module are released

The link gives some information on how to disable the JIT JavaScript compiler in FF 3.5, or to run FF in Safe Mode, or to use NoScript as alternatives to mitigate the problem until the fix is published on Mozilla's website. Note: disabling JIT has a performance impact on FF.

-- Tom