Stopgap Fix for Critical Firefox 3.5 Security Hole

satrow · Jul 14, 2009

http://secunia.com/advisories/35798/

By Brian Krebs
Fortunately, there is a relatively easy fix for this that can be reversed once Mozilla issues a patch. To disable the vulnerable component, open up a new Firefox window and type "about:config" (without the quotes) in the browser's address bar. In the "filter" box, type "jit" and you should see a setting called "javascript.options.jit.content". You should notice that beside that setting it reads "true," meaning the setting is enabled. If you just double-click on that setting, it should disable it, changing the option to "false." That's it.

Note that making this change will slow down Javascript rendering in Firefox 3.5 to 3.0 speeds, but that may be a worthwhile trade-off for readers concerned about the availability of exploit code for this flaw.
http://voices.washingtonpost.com/securityfix/
Click to expand...

mimon · Jul 14, 2009

I just applied the "quick fix" without any noticable negative impact whatsoever,
thanks for the heads-up there Satrow,you might want to try this java tester if you like(just for the "peace of mind" aspect of it)

Mimon

http://www.javatester.org/version.html

http://java.com/en/download/help/testvm.xml

Log in or Sign up

Stopgap Fix for Critical Firefox 3.5 Security Hole

satrow Major Geek Extraordinaire

mimon Private E-2