Mozilla has confirmed a potentially serious flaw in its open source Firefox browser.
Developer Michal Zalewski, who uncovered the flaw, described it as " seemingly pretty nasty, and apparently easily exploitable".

Error could allow for remote exploits
vnunet.com, 26 Feb 2007
Mozilla has confirmed a potentially serious flaw in its open source Firefox browser.
Developer Michal Zalewski, who uncovered the flaw, described it as " seemingly pretty nasty, and apparently easily exploitable".
The vulnerability affects current versions of Firefox for all major PC platforms, according to Zalewski's report.
The use of a certain JavaScript instruction can cause Firefox to crash, allowing an attacker complete access to a system and the ability to run malware remotely.
Zalewski said that the attack could be carried out by convincing a user to access a specially-crafted HTML file that hosts JavaScript code targeting the vulnerability.
Bugzilla, the error-tracking system used by Mozilla, classifies the vulnerability as 'critical', the second-highest priority.
The vulnerability has only been demonstrated as a proof-of-concept code and there have been no reports of active exploits.
The disclosure comes on the same day that Mozilla released an update for Firefox, which does not address the JavaScript flaw.
Mozilla and the US Computer Emergency Readiness Team urged users to mitigate the vulnerability by disabling JavaScript in Firefox.

How web services contribute to data headaches

Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Chris Adams, Office Client product manager for Microsoft UK, explains...

Critics says government proposals to curb illegal downloading are unworkable...
Do you agree?
Have your say on this article