1
Report: Mozilla patches critical flaw in Firefox 10 on Mon Feb 13, 2012 3:05 pm
DragonMaster Jay
Site Owner

There is another new version of Mozilla Firefox available, and version 10.0.1 includes a fix for a critical security vulnerability in the browser. The flaw is a serious use-after-free flaw in a component of the browser that also exists in Thunderbird, SeaMonkey and other Mozilla products.
"Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This crash may be potentially exploitable," Mozilla said in its advisory.
Read more: http://threatpost.com/en_us/blogs/mozilla-fixes-critical-flaw-firefox-021312
..........................................................
DragonMaster Jay
Administrative Director SecuraGeek Association
Advanced Malware Analysts Group Owner

Kaspersky Anti-Virus 2012: Click HereContribute/donate to our site













