Quote
Mozilla Fixes Firefox 9 Crash Issue With Update
Mozilla followed up its Firefox 9 release earlier this week with an update aimed at swatting a bug causing browsers to crash. The fix was issued Wednesday with Firefox 9.0.1, and addresses the issue for users across Mac, Windows and Linux, though Mac users were reportedly affected the most. The source of the problem appears ironically to have been a faulty bug fix included in Firefox 9. Mozilla addressed the issue by removing the patch in the update. The update came roughly 24 hours after the company released Firefox 9 with fixes for several vulnerabilities, including a number of hazardous bugs outlined in four “critical” security advisories.
The two other critical advisories tied to Firefox 9 deal with a crash in the YARR regular expression library that could be triggered by Javascript in Web content and several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of the memory bugs could be exploited to corrupt memory in certain circumstances and possibly to run arbitrary code, according to Mozilla.
In addition to the critical bugs, Mozilla also plugged a security hole classified as "high" risk that could be exploited to trigger a crash for Mac users. Also fixed was a bug that under certain circumstances could be used to enable a malicious Web page to fool a user into interacting with a prompt thinking it came from the browser or mail program. That vulnerability, MSFA 2011-56, was classified as “moderate.”
https://threatpost.c...aign=Position+3