Mozilla Issues Critical Firefox Security Bulletins

Mozilla has released Firefox 3.5.4 with fixes for a wide range of serious security vulnerabilities. The most serious issue could allow a malicious hacker to take complete control of a computer by simply tricking a user into visiting a rigged Web page. In all, Mozilla released 11 advisories, six...

Mozilla Foundation Security Advisory 2009-61

Mozilla Foundation Security Advisory 2009-61 Title: Cross-origin data theft through document.getSelection Impact: Moderate Announced: October 27, 2009 Reporter: Gregory Fleischer Products: Firefox 3 Fixed in: Firefox 3.5.4 Firefox 3.0.15 This vulnerability does not affect products based on the...

Cross-origin data theft through document.getSelection() — Mozilla

Security researcher Gregory Fleischer reported that text within a selection on a web page can be read by JavaScript in a different domain using the document.getSelection function, violating the same-origin policy. Since this vulnerability requires user interaction to exploit, its severity was...