According to the cyber security sleuths at the Computer Emergency Response Team of India, multiple vulnerabilities have been detected in several popular web browsers, including Google Chrome and Mozilla Firefox.
"Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird and SeaMonkey which could be exploited by a remote attacker to bypass certain security restrictions, disclose potentially sensitive information, gain escalated privileges, execute arbitrary code and causes denial of service condition on the affected system," said CERT-In in its latest advisory to online users in the country. The agency, in its advisory, warned Firefox users that: "A user-assisted remote attacker could exploit this vulnerability using a crafted website or webpage. Successful exploitation of this vulnerability could allow user-assisted remote attacker to cause a denial of service condition." This vulnerability is cau sed by "improper restrict access to 'about:home' buttons by script on other pages in Mozilla Firefox."
Similar vulnerabilities have been reported in Google's popular browser. "Multiple vulnerabilities have been reported in Google Chrome which could be exploited by a remote attacker to cause denial of service condition or execute arbitrary code on the target system," said CERT-In. According to the agency, these vulnerabilities can cause memory corruption, unwanted downloading of files, loss of sensitive information - particularly when Mozilla Firefox is used on Android devices, and cause of denial of various internet-based services for the user. The affected browsers include "Firefox versions prior to 27.0, Firefox extended support release (ESR) versions prior to 24.3, Thunderbird versions prior to 24.3, SeaMonkey versions prior to 2.24 and Google Chrome prior to version 32.0.1700.102." CERT-In suggests using proper se curity patches and upgrading the browser version to guard against these issues.
Photo credit: Johan Larsson via Flickr
via Technology - Google News http://ift.tt/1kOZEs6
Put the internet to work for you.
0 comments:
Post a Comment