The vulnerability was flagged in Greasemonkey, the Firefox add-on that allows users to load custom scripts that modify Web sites on the fly.

The flaw is so serious that developers are warning users to completely uninstall Greasemonkey versions prior to 0.3.5.

Mark Pilgrim, an XML coder who helped to evangelize the extension with the free "Dive into Greasemonkey" e-book, has published working exploits to highlight the severity of the flaw.

In a series of posts to the Greasemonkey mailing list, Pilgrim warned that the published exploits are "much, much worse" than first imagined, noting that a successful attacker could hijack any world-readable file from a vulnerable computer.

Read this full article at eWeek

Write Comment
Please keep the topic of messages relevant to the subject of the article. Personal verbal attacks will be deleted. Please don't use comments to plug your web site.. Such material will be removed.
Name:
Title:
Comment:
Code:*

Powered by AkoComment!