Security holes hit Firefox
Users of the latest version of the open source Firefox browser face two "extremely critical" security holes relating to...
Antony Savvas
Users of the latest version of the open source Firefox browser face two "extremely critical" security holes relating to cross-site scripting and hacker remote access.
Security researcher Secunia has reported the "proof of concept" flaws and said that they are extremely critical as exploited code has been circulated on the internet.
The Mozilla Foundation is still working on fixes to the flaws in its version 1.0.3 Firefox browser, but in the meantime it has advised users to temporarily disable JavaScript on their browsers.
Mozilla has also changed its web update system to help reduce the risk of the security holes.
Mozilla said it was not aware of any exploits of the vulnerabilities among Firefox users.
There have been over 44m downloads of recently launched Firefox, which is aiming to challenge the dominance of Microsoft's Internet Explorer, which has around 90% of the browser market.
Read more on Operating systems software
Mozilla fixes Firefox buffer overflow vulnerabilities
Firefox update blocks proof-of-concept code
Mozilla issues update to repair critical Firefox flaws
Mozilla releases Firefox fix
Mozilla fixes Firefox again – ComputerWeekly.com
Mozilla fixes Firefox buffer overflow vulnerabilities – ComputerWeekly.com
Firefox update blocks proof-of-concept code – SearchSecurity