Mozilla has urged all users of Firefox to update to latest version in an blog post on 6th August. A serious exploit has been reported by user that searches for [su_pullquote align=”right”]If you are using Firefox to browse the web, you probably should update it as soon as possible.[/su_pullquote]sensitive files and then uploads them to a server located in Ukraine. according to Mozilla the problem was with browser’s built-in PDF viewer, so any user running Mozilla Versions without the built-in PDF support ( Firefox for Android ) won’t have any security thereat.
Further More Mozilla has also said that Only Windows and Linux version were under risk and Mac OS X versions were not the targets at this particular time.
The vulnerability does not enable the execution of arbitrary code but the exploit was able to inject a JavaScript payload into the local file context. This allowed it to search for and upload potentially sensitive local files.
Users with Ad-Blockers may be safe
As the exploit was served through an advertisement in an Russian news website, users who had an ad-blocker are safe -hoping that the ad was blocked.
People who use ad-blocking software may have been protected from this exploit depending on the software and specific filters being used.
In the blog post Mozilla’s Daniel Veditz cleared that the exploit did not leave any trace in Local computer.
Mozilla has already made a patch available, that can be installed right now. Mozilla is also urging all the firefox users to upgrade their browser to the latest version 39.0.3.
Image Credit: Mozilla in Europe on Flickr
