Mozilla confirms critical Firefox bug.

Mozilla yesterday confirmed a critical vulnerability in the newest version of Firefox, and said it would plug the hole by the end of the month.
Although the patch won't be added to Firefox before next week's Pwn2Own browser hacking challenge, researchers won't be allowed to use the flaw, according to the contest's organizer.

"The vulnerability was determined to be critical and could result in remote code execution by an attacker," Mozilla acknowledged in a post to its security blog late Thursday. "The vulnerability has been patched by developers and we are currently undergoing quality assurance testing for the fix."

Source -
Mozilla confirms critical Firefox bug

That and the half dozen security fixes just posted for Chrome...

What's really sad about the browser bravado is that people tell their less knowledgable friends and family to "switch to X and you'll be safe" and then they actually THINK they are safe and never bother to update, making themselves in some cases even less safe than ever. (Heck a lot of fanbois themselves are like that)

Choose a browser for features, but then make sure it is secured properly after install (limited scripts on unknown sites, allow scripts only on selected sites as needed, popup and cookie control etc etc) and kept up to date whatever it is. Teach that to your friends and family and they'll be a LOT safer too.

Darryl Licht said:

fseal said:

That and the half dozen security fixes just posted for Chrome...

The fixes are due to a Canadian browser hackfest starting this week... just shoring up security to prevent the hackfest from blowing them up!

They were holes regardless, several severe ones too. Would they have NOT fixed them before the hacker fest? Is the hacker fest the only place they were expecting to get hacked? Would they ave stayed there indefinately if not for it?

It doesn't matter when or why, the holes were there in every download made. There are probably 100 more waiting... And since every version released has them if Chrome users don't feel that they are vulnerable or know anything about it then guess what? Unpatched browsers by the tens of thousands just sitting ripe for pwnage...

No browser is "safe" for very long. That's the lesson. Hand secure it, keep it updated. Don't lie to people (not you personally) about this or that being "safe" or "Safer" it's not true. never was is or will be.

Im still on the Mozzila before that build and havnt upgraded yet. So i think im safe as it is.

related thread here for folks who might wish to read comments:
Mozilla confirms critical Firefox bug

I don't know what the big deal is with Firefox. I tried it out for about 3-4 days, and then went right back to IE8. It was a kiddy browser if you ask me.