A Russian security researcher on Thursday said he has released attack code that exploits a critical vulnerability in the latest version of Mozilla's Firefox browser.. The exploit - which allows attackers to remotely execute malicious code on end user PCs - triggers a heap corruption vulnerability in the popular open-source browser, said Evgeny Legerov, founder of Moscow-based Intevydis. He recently added it as a module to Vulndisco, an add-on to the Immunity Canvas automated exploitation system sold to security professionals. "We've played a lot with it in our labs - it was very reliable," Legerov wrote in an email to The Reg. "Works against the default install of Firefox 3.6. We've tested it on XP and Vista." The report comes as Mozilla pushed out a Firefox update that tackles three critical vulnerabilities in version 3.5.7. One of those bugs is also described as a heap corruption vulnerability, but Legerov said the flaw is different from the one his code exploits. The link for this article located at The Register UK is no longer available. . A vulnerability in Firefox has been discovered that allows malicious actors to execute arbitrary code on users' computers. Learn more about this serious security issue.. Firefox Exploit, Remote Code Execution, Heap Corruption, Cybersecurity Research. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.