Critical JavaScript flaw hits Firefox 3.5

Mozilla has confirmed a critical vulnerability in its JavaScript compiler.

security key

A newly-discovered critical flaw in Firefox 3.5's JavaScript compiler could be used to execute malicious code, Mozilla developers have admitted.

According to the Mozilla security blog, the vulnerability in the Just-in-time JavaScript compiler was discovered last week - just over a week after Firefox 3.5 was made available for download. The TraceMonkey JavaScript engine has been patched once already.

"Mozilla developers are working on a fix for this issue and a Firefox security update will be sent out as soon as the fix is completed and tested," Mozilla noted on its security blog.

In the mean time, users should either run Firefox in Safe Mode or disable the compiler. Mozilla gave instructions on how to do that here, but acknowledged it would hurt JavaScript performance. The flaw can only be exploited if a Firefox user visits a web page containing malicious code.

Click here for our review of Firefox 3.5 - and here to learn more about the browser.

Featured Resources

The definitive guide to warehouse efficiency

Get your free guide to creating efficiencies in the warehouse

Free download

The total economic impact™ of Datto

Cost savings and business benefits of using Datto Integrated Solutions

Download now

Three-step guide to modern customer experience

Support the critical role CX plays in your business

Free download

Ransomware report

The global state of the channel

Download now

Recommended

Mozilla and Brave release one-click method for online privacy requests
web browser

Mozilla and Brave release one-click method for online privacy requests

7 Oct 2020

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

17 Sep 2021
What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
Best MDM solutions 2020
mobile device management (MDM)

Best MDM solutions 2020

17 Sep 2021