According to InfoWorld, Mozilla is working on a patch for its Firefox browser after a hacker posted details of a flaw that could let intruders run unauthorized software on a victim's machine.
The flaw lies in Firefox's URL handler component, which was the source of another bug Mozilla disclosed Tuesday. This second flaw was disclosed Tuesday by Billy Rios and Nathan McFeters, security consultants with VeriSign and Ernst & Young, respectively. Like the first flaw, this one could be exploited by attackers to launch programs on the victim's PC without authorization.
![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}