Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Mozilla Firefox 3.6.2: Critical Browser Security Advisory on Web Fonts

Calendar Mar 24, 2010 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory critical Mozilla browser update Web font issue
Mozilla released Firefox 3.6.2 late Monday to fix a critical security hole involving Web-based font technology. "We strongly recommend that all Firefox users upgrade to this latest release. If you already have Firefox 3.6 you will receive an automated update notification within 24 to 48 hours. This update can also be applied manually by selecting 'Check for Updates...' from the Help menu," Mozilla's director of Firefox, Mike Beltzner, said in a blog post.. With the vulnerability, an attacker could crash a person's browser and, worse, run arbitrary code on the person's machine, Mozilla said. Because it involves a technology called Web Open Font Format (WOFF) introduced in Firefox 3.6, it doesn't affect earlier versions.

Here are further details about the 111 changes in the new version and the not terribly verbose 3.6.2 release notes

The link for this article located at CNET is no longer available.