dotTech - Topic: Firefox 16 has a security vulnerability - do not use http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/ Simple:Press Version 5.2.6 Grantwhy on Firefox 16 has a security vulnerability - do not use http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16975 Gen-Tech http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16975 yes, Firefox 16.0.1 has fixed that security vulnerability.

]]> Sun, 21 Oct 2012 19:14:35 -0700 Switch-kun on Firefox 16 has a security vulnerability - do not use http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16974 Gen-Tech http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16974 Mine is updated to version 16.1. That's considered safe? It is, right?

]]> Sun, 21 Oct 2012 18:05:15 -0700 Ashraf on Firefox 16 has a security vulnerability - do not use http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16917 Gen-Tech http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16917 Thanks!

]]> Wed, 10 Oct 2012 22:50:20 -0700 Grantwhy on Firefox 16 has a security vulnerability - do not use http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16916 Gen-Tech http://dottech.org/forums/gen-tech/firefox-16-has-a-security-vulnerability-do-not-use/#p16916 stay on Firefox 15.0.1 (or downgrade to it) until a fix is released tomorrow

from https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/

Mozilla Security Blog
Mozilla
Security Vulnerability in Firefox 16

Oct 10 2012
Issue:
Mozilla is aware of a security vulnerability in the current release version of Firefox (version 16). We are actively working on a fix and plan to ship updates tomorrow. Firefox version 15 is unaffected.

Impact:
The vulnerability could allow a malicious site to potentially determine which websites users have visited and have access to the URL or URL parameters. At this time we have no indication that this vulnerability is currently being exploited in the wild.

Status:
Firefox 16 has been temporarily removed from the current installer page and users will automatically be upgraded to the new version as soon as it becomes available. As a precaution, users can downgrade to version 15.0.1 by following these instructions [http://www.mozilla.org/firefox/new/]. Alternatively, users can wait until our patches are issued and automatically applied to address the vulnerability.

Michael Coates
Director of Security Assurance

]]> Wed, 10 Oct 2012 20:55:29 -0700