Title: Mozilla Firefox 3.5 Remote Code Execution Vulnerability Severity: HIGH Description: Mozilla Firefox is a web browser available for various platforms. Firefox is prone to a remote code-execution vulnerability due to an unspecified error. This issue arises during the processing of JavaScript and may present itself when certain string characters are escaped and subsequently copied to a buffer. Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed attempts will likely result in denial-of-service conditions. The issue affects Firefox 3.5; other versions may also be vulnerable. The remote code execution was confirmed in Firefox 3.5 running on Microsoft Windows XP SP2. A crash was observed in Firefox 3.5 on Microsoft Windows XP SP3. Affected Products: * Mozilla Firefox 3.5.0 |
In 2007 and 2008 FireFox was the most vulnerable browser which had the most critical level security issues. It looks like it's on track to get the title for a 3rd straight year!
If you like a secure browser and one with a minimal plug-in footprint:
IE7 or IE8 + http://www.ie7pro.com = The way to go