- Joined
- Mar 5, 2002
- Messages
- 25,752
- Reaction score
- 1,211
Here at Switched, we're big fans of Firefox, the once alternative Web browser from Mozilla that, within a few years, has become hugely popular, with nearly one in four Web surfers using it today. We quickly downloaded the 3.5 release when it was made available a few weeks ago -- alas, a raft of security warnings are making us wonder whether that was necessarily the best idea.
Not long after the eagerly-anticipated 3.5 release, a major security vulnerability was found -- a flaw that could have allowed shady Internet sites to infiltrate your computer and, possibly, install spyware. That flaw was patched last week, but now, just a few days later, another security hole has been found. It's called the "Unicode Data Remote Stack Buffer Overflow Vulnerability," and, as of now there's no fix from Mozilla.
Should you be worried? Probably not, as it's unlikely that more than a handful of sites are using this exploit, and they're surely relegated to the darkest corners of the Web. This is really just more of a black eye for the browser, which was pledged as a more secure alternative to Microsoft's Internet Explorer. Still, you should always be careful and be wary before you go to random sites you've never heard of -- and, when Firefox prompts you about an important security update in a day or two, you'd best install it. [From: SecurityFocus, via DownloadSquad]
http://www.switched.com/2009/07/20/yet-another-security-flaw-hits-firefox-3-5-web-browser/