Firefox 3.5 was released last month with plenty of fanfare, but already Mozilla has had to issue a warning of a critical JavaScript flaw in the new browser.
The problem lies in the just-in-time (JIT) component of the JavaScript tool, and an exploit could let an attacker remotely execute code on the system – and a working exploit has been released. JIT is part of TraceMonkey, which was added for this release of the browser.
Although no patch has yet been developed, Mozilla says users can work around the problem by disabling the Firefox 3.5 JIT compiler, although this will reduce JavaScript performance.
The US Computer Emergency Response Team has suggested people completely disable JavaScript functionality in Firefox 3.5.
Editors' Recommendations
- GPT-4 vs. GPT-3.5: how much difference is there?
- Nvidia’s DLSS 3.5 update flips ray tracing on its head
- These coding languages will land you the best-paying jobs
- Mozilla Firefox’s new feature will make it harder for ISPs to spy on you
- Mozilla Firefox’s new add-on lets you surf the web with your voice
