While surfing through one of my favorite blogs ghacks, i came across the news of serious security vulnerability in firefox 3.5.

This serious vulnerability is discovered by Simon Berry and is posted on the milw0rm security portel under the title ” Firefox 3.5 Heap Spray Vulnerabilty”. This news is allready confirmed by mozillalinks and they have allready published the security patch for this.

This vulnerability could be fixed by following these simple steps:

Enter about:config in the location bar to access advanced preferences.
Look for javascript.options.jit.content and double click it to set it to false.
Since, the vulnerability is related to TraceMonkey JavaScript optimizer, users needs to mitigate it by temporarily disabling the optimizer. By this the javascript performance of firefox3.5 would be reduced but we trust that the mozilla team will prepare a quick official patch for solving the problem.

Do share this post with your friends to make them aware of the critical problem and help them to get it fixed.

In the previous post of mine, I had updated you about the critical security vulnerability in Firefox 3.5 . In response to this, Firefox 3.5.1 update is now available. The updated setup is now available on Mozilla Website.If you are using Firefox 3.5 allready, you can update your Firefox to v3.5.1 simply by going through

Help >> Check for updates..

A new window like the in the screenshot will pop out and all you need to do, is to click on Update Firefox.

A critical security vulnerability was discovered in Firefox3.5, and this update fix that vulnerability on its own. If the update is still not available for you, you can fix this problem manually by going through the following steps:

Enter about:config in the location bar to access advanced preferences.
Look for javascript.options.jit.content and double click it to set it to false.
If you had allready applied the above steps, and this update is available for you, then you need to undo the manual changes you did before. To do this, simply follow the previous 2 steps and double click javascript.options.jit.content and set it to true. Now, you are ready to update your Firefox to v3.5.1

If you does not get the update option in your Firefox, you can get it from their US website by clicking here.

The Mozilla team is working on decreasing the start-up time of Firefox, which i guess will be provided in next update at the end of this month.