May 17, 2012

You are here: Home / Firefox / Mozilla Fixes Critical Vulnerability in Firefox and Thunderbird

Mozilla Fixes Critical Vulnerability in Firefox and Thunderbird

February 13, 2012 By

(LiveHacking.Com) – Mozilla has released new versions of Firefox and Thunderbird to fix a “use after free” crash which is potentially exploitable. According to the security advisory Mozilla developers Andrew McCreight and Olli Pettay found that the ReadPrototypeBindings code leaves a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This crash may be potentially exploitable.

The Mozilla Foundation said Firefox 9 and earlier browser versions are not affected by this vulnerability.

Share and Enjoy:
  • Print
  • Digg
  • StumbleUpon
  • del.icio.us
  • Facebook
  • Yahoo! Buzz
  • Twitter
  • Google Bookmarks
Filed Under: Firefox, Firefox, Mozilla, SeaMonkey, Thunderbird, Vulnerability Tagged With: , ,

Trackbacks

  1. Mozilla Releases Another New Version of Firefox to Fix Yet Another Critical Vulnerability | LIVE HACKING says:
    February 20, 2012 at 1:50 am

    [...] – Less then 7 days after the release of Firefox 10.0.1, Mozilla has now released a new version of Firefox (10.0.2) and Thunderbird (also 10.0.2) to fix a [...]