Firefox 3.6.2 addresses critical vulnerability

A Web-based font issue could let remote attackers have their way with your computer. Mozilla issues Firefox 3.6.2 to fix the problem.

Mozilla released Firefox 3.6.2 late Monday to fix a critical security hole involving Web-based font technology.

"We strongly recommend that all Firefox users upgrade to this latest release. If you already have Firefox 3.6 you will receive an automated update notification within 24 to 48 hours. This update can also be applied manually by selecting 'Check for Updates...' from the Help menu," Mozilla's director of Firefox, Mike Beltzner, said in a blog post.

With the vulnerability, an attacker could crash a person's browser and, worse, run arbitrary code on the person's machine, Mozilla said. Because it involves a technology called Web Open Font Format (WOFF) introduced in Firefox 3.6, it doesn't affect earlier versions.

Here are further details about the 111 changes in the new version and the not terribly verbose 3.6.2 release notes.

Featured Video
This content is rated TV-MA, and is for viewers 18 years or older. Are you of age?
Sorry, you are not old enough to view this content.

iPhone 6S chip controversy over battery life

Not all new iPhones have the same processor chip, but Apple says differences in performance are minimal. Apple also pulls ad-blocking apps over privacy concerns, and Netflix raises its price again.

by Bridget Carey