Mozilla Firefox browser has been hacked in just eight seconds
An"untrusted input used in JavaScript object indexing, leading to prototype pollution," which could allow an attacker to send"a message to the parent process where the contents were used to double-index into a JavaScript object." This, in turn, led to the prototype pollution as described in the first exploit example.In most cases, the answer will be nothing.
Rather it 'up plays' the fact that the Mozilla Foundation reacted super-quickly to the disclosure and has already released an emergency update for Firefox that patches the flaws. Because Firefox will automatically update by default, and even do so in the background when you don't have the browser open, it should have been applied and fixed for most people by now.
If you keep your browser running, without restarts or have disabled automatic updates for whatever reason, then you won't be protected until such a time as the patch is downloaded, installed and the browser restarted. For desktop users, this means heading for the hamburger menu top right then Help|About Firefox.The patched and updated version numbers you are looking for are:Firefox v91.9.
A quick check of the iOS app situation shows that this has not been updated since before the PWN2OWN event and is currently at v100.1 at least on my iPhone 13 Pro. I have reached out to ask if an iOS update is still to come or whether the exploit does not apply on this platform and will update the article when I know more.
Norge Siste Nytt, Norge Overskrifter
Similar News:Du kan også lese nyheter som ligner på denne som vi har samlet inn fra andre nyhetskilder.
Wormhole announces $10 million bug bounty payoutWormhole paid out $10 million to a hacker who reported a security flaw, according to its bug bounty partner Immunefi.
Les mer »
Boeing docks crew capsule to space station in test do-overWith only a test dummy aboard, Boeing’s astronaut capsule pulled up and parked at the International Space Station for the first time Friday, a huge achievement for the company after years of false starts.
Les mer »
Woman in critical condition after accident at Lake Pleasant SaturdayA woman is in critical condition after a boating accident this evening at Lake Pleasant. Details on the incident haven't been released: abc15
Les mer »
Boeing docks crew capsule to space station in test do-overBoeing's astronaut capsule has arrived at the International Space Station in a critical repeat test flight.
Les mer »