Critical Security Vulnerability in Firefox 3.5 and 3.6

Mozilla has issued a critical security alert affecting users of Firefox 3.5 and 3.6.

"Users who visited an infected site could have been affected by the malware through the vulnerability," the announcement said. "The trojan was initially reported as live on the Nobel Peace Prize site, and that specific site is now being blocked by Firefox's built-in malware protection. However, the exploit code could still be live on other websites."

Until a fix is made available, Mozilla recommends using the NoScript plugin or disabling JavaScript in Firefox.

View Article