Firefox 3 set a record, notching up over eight million downloads in the first 24 hours of its release, and giving Mozilla a 6% share of the browser market. But one thing they didn’t need – certainly not so quickly – was for someone to find a flaw in the browser.
But Tipping Point’s Zero Day Foundation has done exactly that, according to CNET News. It reported a flaw, that it rates as critical, within five hours of the browser being released, and they say it’s a flaw that also affects Firefox 2.
Although they won’t say what the flaw is, giving Mozilla a chance to patch it, they will confirm that it could let an attacker execute arbitrary code.
"Once the vulnerability was verified in TippingPoint’s DVLabs and acquired from the researcher, the vulnerability was promptly reported to the Mozilla security team," a spokesperson said.
Mozilla is currently working on a patch for the flaw.