New Firefox Vulnerability

Mozilla Firefox JavaScript Engine Hole

[outrun]

[secunia.com...]

The vulnerability is caused due to an error in the JavaScript engine, as a "lambda" replace exposes arbitrary amounts of heap memory after the end of a JavaScript string.

Successful exploitation may disclose sensitive information in memory.

Heard this before?
Solution: Disable Javascript

<added>Mozilla Suite has the same Problem
[secunia.com...]
</added>

[tedster]

Thanks, outrun. Looks like version 1.0.3 will soon be with us.