Bitchen... more reason to run to the hills and just spend the rest of my life naked, in a jungle, contemplating why Bill left Microsoft. OR.... or... I can get drunk. Maybe the later... oh and make sure you update your browser. 

For the second time this week, Mozilla has rushed out a Firefox security update to fix a dangerous security vulnerability.

The latest vulnerability, which was discovered and reported by representatives from Red Hat, “could be attacked simply by displaying a maliciously crafted image.”

The skinny from a Mozilla advisory:
follow Ryan Naraine on twitter

The libpng graphics library, used by Firefox and Thunderbird as well as many other software packages, contains an exploitable integer overflow bug. An attacker could craft malicious images which exploit this bug, and deliver them to users through websites or email messages.

This bug is remotely exploitable and can lead to arbitrary code execution. Firefox, Thunderbird and Seamonkey users could be attacked simply by displaying a maliciously crafted image.

Read the entire article....

Interesting... it looks like... Chrome.

Below is a sample of what Firefox may look like by the end of the year with Firefox 17 (November 20th, 2012). Some things I have noticed is more streamline look, emphasis on app tabs, the removal of the forward button when you can not go forward. A couple big things is looks like they are dropping the separate search box which I am not too happy about (one thing I dislike about Google Chrome is everything is done from the url bar). Also MIA is the ‘Firefox Button’ introduced back in Firefox 4. I am not sure if Favicons in the address bar are being remove or that is just because the site they are using an example does not appear to have a favicon.

Read the rest of the article....

Updated...

Mozilla Firefox is a free and open source Web browser descended from the Mozilla Application Suite and managed by Mozilla Corporation. Firefox is the second most widely used browser.

To display web pages, Firefox uses the Gecko layout engine, which implements most current web standards in addition to several features that are intended to anticipate likely additions to the standards.

Read, Download, play... OR call it a day early and drink beer!

Patch it! Patch it now! 

From Mozilla’s advisory:

Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This crash may be potentially exploitable.

Mozilla rates this a “critical” vulnerability that can be used to run attacker code and install software, requiring no user interaction beyond normal browsing. 

Read the entire article...