Malicious code in an image could enter PC through browser
Malicious code in an image could enter PC through browser

Mozilla fixes new Firefox flaw

Users urged to download patched version immediately

Written by Iain Thomson

The Mozilla Foundation has released a new security patch for its Firefox internet browser and is urging users to install it.

The patch fixes a flaw in the software that handles animated GIF images that could cause a buffer overflow.

If a hacker embedded malicious code in an image it could conceivably enter a PC through the browser software, although no exploit code has yet been found in the wild.

"The Mozilla Foundation is deeply committed to providing its users with the safest internet experience possible," said Chris Hofmann, director of engineering at Mozilla.

"To deliver our users the experience they deserve, we must stay ahead of the curve in patching potential vulnerabilities. For example, the bug patched in this update has no known real world exploits, and we were able to provide a quick response."

The flaw came to light after work done by security researchers at Internet Security Systems but was fixed before they published their report. This is the second Firefox patch to be released in the past month. The buffer overflow patch is available here.

Tags:

reader comments

related articles

Users advised to diasable JavaScript in Firefox browser

Firefox hit with new critical flaws

Holes could allow hackers to implant Trojan or key-logger 09 May 2005

 

Netscape hit by critical flaw

'Use another product,' advises browser firm 28 Apr 2005

Mozilla Bug Bounty pays fault-finders

Users who find flaws offered $500 per bug plus a free T-shirt 31 Mar 2005

Firefox market share rockets

IE5 users might be moving to Firefox not IE6, says web analytics firm 01 Mar 2005

Explorer douses Firefox flames

Stellar growth of open source browser begins to slow 28 Feb 2005

Firefox foils phishing flaw

Security update fixes spoofing and arbitrary code execution, says Mozilla 25 Feb 2005

Firefox hits 25 million downloads

Open source browser making its way into the mainstream 22 Feb 2005

QuickTime flaw adds to Apple's woes

Exploit especially dangerous for Firefox users 27 Nov 2007

Firefox gets security tune-up

Flaws patched for versions 2 and 3 18 Jul 2008

Apple QuickTime exploit goes wild

Streaming media flaw used to push malware 04 Dec 2007

today's top stories

Analysis: The true cost of printing

Organisations need to get a better sense of how much they spend on printing before finding ways to reduce it 05 Sep 2008

Computing podcast 4 September 2008

Find out what Michael Dell told Computing, and listen to our take on the latest browser wars 04 Sep 2008

Looking to the future - exclusive Michael Dell interview

Dell's chief executive talks to Computing about the way the company continues to adapt to major changes in the industry 04 Sep 2008

Interview: Delivering power where it's needed at Betfair

The online gambling firm is putting its money on grid computing and virtualisation to underpin global expansion 04 Sep 2008

E-paper displays are an open book

A display revolution is on the way - but only once the user interface issues are solved 04 Sep 2008

Most commented stories

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you use a mobile phone as an alternative to cash?

Would you use a mobile phone as an alternative to cash?

When mobile phones include inbuilt payment technology - would you use one instead of cash?

Previous poll results

Latest audio and video articles

BlackBerry BoldVideo

Video Review: BlackBerry Bold

Technology editor Daniel Robinson takes a hands-on look at the latest device from Research in Motion 01 Sep 2008

Podcast imageAudio

Computing podcast 4 September 2008

Find out what Michael Dell told Computing, and listen to our take on the latest browser wars 04 Sep 2008

Latest in-depth articles

A meetingAnalysis

Turning adversity into an advantage

IT chiefs under pressure to make cost cuts can turn the situation to their benefit 04 Sep 2008

CloudAnalysis

How to introduce cloud computing into your organisation

Best practice advice from Forrester Research 04 Sep 2008

Primary Navigation