wraggster
August 8th, 2015, 22:51
http://o.aolcdn.com/hss/storage/midas/886c59c3e1edd1ba70463698ba1fbde8/202436685/mozilla-security-hole-2015-08-07-01.jpg (http://www.engadget.com/2015/08/07/firefox-security-flaw-patched/)Yesterday, someone noticed that an ad from a Russian news site was exploiting a serious vulnerability in the Firefox browser (http://www.engadget.com/2015/07/14/firefox-blocks-flash/). According to a Mozilla security post (https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/), the attacker was able to bypass the browser's "origin policy" (its front line of security), inject a malicious javascript script and download sensitive local files to a server in the Ukraine. Mozilla said the attack was "surprisingly developer-focused for an exploit launched a general audience news site," because it hunted browser and FTP configuration files. It added that the "exploit leaves no trace that it has run on the local machine."
http://www.engadget.com/2015/08/07/firefox-security-flaw-patched/
http://www.engadget.com/2015/08/07/firefox-security-flaw-patched/