Mozilla: Bug in Firefox 3.5.1 is not exploitable

Mozilla: Bug in Firefox 3.5.1 is not exploitable

Mozilla has just released the first bug fix release of their Firefox 3.5 web browser.

However, security experts have already revealed details of another bug in the latest stable edition Firefox 3.5.1.

Mozilla has countered the reported by stating that the bug revealed is not exploitable and users have nothing to worry about.

Mike Shaver, Mozilla’s vice president of engineering said in a blog post: “The reports by press and various security agencies have incorrectly indicated that this is an exploitable bug. Our analysis indicates that it is not, and we have seen no example of exploitability.”

The bug is serious enough to crash the browser session.

Shaver said that the crash is safe and immediate and security is not compromised. We do expect them to release another quick update however.

Checkout: milw0rm 9158 “stack overflow” crash not exploitable (CVE-2009-2479)