Category Archives: Security Exploits

WordPress 2.8.2 Fixes XSS Vulnerability

Posted on July 21, 2009 by Pete Mall

WordPress 2.8.2 was released on Monday, July 20 which patches a known XSS vulnerability. The URLs for the commenters(comment authors) were not fully sanitized before being displayed in the admin area which could be exploited to redirect from the admin area to another site. Continue reading →

Posted in Security Exploits, WordPress | 2 Comments

JIT Fixed in Firefox 3.5.1, New Vulnerability Exposed

Posted on July 19, 2009 by Pete Mall

Firefox 3.5.1 was released on Friday, July 17 which included a patch for the Just-in-time (JIT) JavaScript compiler exploit. However, a new stack-based buffer overflow vulnerability has been exposed with sample exploit code. An attacker can cause a buffer overflow and … Continue reading →

Posted in Firefox, Security Exploits | Leave a comment

Critical JavaScript Vulnerability Surfaces in Firefox 3.5

Posted on July 15, 2009 by Pete Mall

Firefox 3.5 boasts of screaming fast JavaScript performance — almost twice as fast as Firefox 3. Firefox 3.5 attributes its dramatically better JavaScript performance to the TraceMonkey Just-in-time (JIT) JavaScript compiler. However, a serious remote buffer overflow security exploit was discovered last week in Firefox 3.5’s Just-in-time (JIT) JavaScript compiler, which enables the execution of malicious code. Continue reading →

Posted in Firefox, Security Exploits | Leave a comment