Bug hunters make short work of Firefox

Security researchers have wasted no time in prodding Firefox 3 for possible security holes.

Just five hours after the browser made its public debut, the first remote code execution vulnerability was reported.

Security firm Tipping Point revealed on Wednesday that it received the report via its Zero Day Initiative service shortly after the browser was released.

Tipping Point has declined to release the name of the researcher who discovered the flaw, nor is it disclosing any further details on the vulnerability until a patch is prepared.

However, the flaw is categorised as a 'critical' vulnerability that could allow an attacker to remotely execute code on a user's computer.

Tipping Point said that it had sent the report to Mozilla and that developers were currently working on a fix for the flaw.

The security company plans to disclose further details on the nature of the vulnerability once a patch has been issued. No attacks targeting the vulnerability in the wild have been reported.

Security firms F-Secure and Secunia both recommend that users mitigate the risk by following best practices such as avoiding suspicious links and steering clear of untrusted sites.

Firefox falters as fans flood in

'World record' event swamps Mozilla servers  18 Jun 2008

Firefox 3 Beta 3 ready for download

Experts only, warns Mozilla  13 Feb 2008

Web shop offers discount to Firefox users

Five per cent off for not using IE  07 Jan 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!