Paramount Plus Marvel's Loki release date Spider-Man 3 title Control Spot robot online Powerball $90M drawing Wednesday Third stimulus check rules

Firefox 3.6.2 addresses critical vulnerability

A Web-based font issue could let remote attackers have their way with your computer. Mozilla issues Firefox 3.6.2 to fix the problem.

Mozilla released Firefox 3.6.2 late Monday to fix a critical security hole involving Web-based font technology.

"We strongly recommend that all Firefox users upgrade to this latest release. If you already have Firefox 3.6 you will receive an automated update notification within 24 to 48 hours. This update can also be applied manually by selecting 'Check for Updates...' from the Help menu," Mozilla's director of Firefox, Mike Beltzner, said in a blog post.

With the vulnerability, an attacker could crash a person's browser and, worse, run arbitrary code on the person's machine, Mozilla said. Because it involves a technology called Web Open Font Format (WOFF) introduced in Firefox 3.6, it doesn't affect earlier versions.

Here are further details about the 111 changes in the new version and the not terribly verbose 3.6.2 release notes.