"Results from our beta testing show Firefox 3.6.4 will significantly reduce the number of Firefox crashes experienced by users who are watching online videos or playing games," said Christian Legnitto, who oversees the Firefox releases, in a post to Mozilla's blog. "Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code," Mozilla said, using boilerplate language it often inserts into browser or JavaScript engine security advisories.īut Mozilla wanted all eyes on Firefox 3.6.4 for a different reason. Mozilla also marked a clutch of bugs in the browser and JavaScript engines as critical, although it only assumed the flaws could be exploited. It was Nils' second Pwn2Own victory last year he grabbed $15,000 by exploiting not only Firefox, but also Safari and IE8. Last March, Nils took home $10,000 by sidestepping DEP (data execution prevention) and ASLR (address space layout randomization) in Windows 7 to exploit the then-current Firefox 3.6.2.
0 kommentar(er)
