Mozilla released Firefox 67.0.4, repair sandbox escape vulnerabilities

Not long ago, Mozilla released Firefox 67.0.3 fixes a remote code execution vulnerability 0day . Since the vulnerability occurs, and found that it is associated with another unknown vulnerability, as part of a phishing attack, the purpose is to perform malicious payload on the victim's computer.

Mozilla has recently released the next Firefox 67.0.4, it is to fix this other vulnerability is a browser sandbox escape vulnerabilities could allow an attacker to bypass the browser's sandbox protection. This combined with the 0day vulnerability before it, allow an attacker to execute remote code execution on vulnerable computers.

It reports that this vulnerability is very serious , and have been used in targeted attacks, want users to immediately upgrade to Firefox 67.0.4.

Download of the new version, users can> Help-> About FireFox to see the new Firefox updates by visiting the Firefox menu-, also from  FireFox download page for updates.

Guess you like

Origin www.oschina.net/news/107718/firefox-67-0-4-released