Mozilla closes gaping remote code hole in Firefox

Mozilla quickly has turned around a patch for a dangerous zero-day vulnerability in its Firefox web browser. One day after the company publicly confirmed the flaw, Mozilla released a fix in Firefox versions 3.6.12 and 3.5.15, according to an advisory. The vulnerability, which was being exploited in the wild, could permit remote code execution. It was first discovered by researchers at security firm Norman ASA after discovering malware on the website for the Nobel Peace Price. — DK