July 15, 2009

THE MOZARELLA FOUNDATION is investigating a cheesy JavaScript flaw in Fire badger 3.5 that leaves one's computer open to a serious attack.

TThe critical flaw was revealed by insecurity outfit Secunia, which found that some exploit code is already available online. There have been no reports yet of the flaw being exploited in the wild, but that is likely just a matter of time.

The flaw is activated by a poisoned web page that is usually handed over by a wicked witch while the dwarfs are away at work and causes the user to fall asleep for a thousand years. [I think you have been writing too many insecurity stories. - Ed]

There is a temporary fix for the problem. It involves disabling the new Javascript processing feature in Firefox 3.5 and thus rendering the upgrade to from 3.0 to 3.5 largely pointless.

However the Mozzarella Foundation says it's close to fixing the hole and will issue an update to patch it fairly soon. We guess the race is on to see who gets there first.