11–20 of 111 posts
I'm at a loss imagining how this might work, can anyone expound on this? How might this actually occur?
"A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw." I'm at a loss imagining how this might work, can anyone expound on this? How might this actually occur?
We merged that thread (https://news.ycombinator.com/item?id=20220804) into this one.
"A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw." I'm at a loss imagining how this might work, can anyone expound on this? How might this actually occur?
This quote is from https://www.mozilla.org/en-US/security/advisories/mfsa2019-1... . We merged that thread ( https://news.ycombinator.com/item?id=20220804 ) into this one.
Earlier quoted context omitted.
True they could have been clearer on the versions affected, but tbh you should keep with the latest supported anyway. Security bug reports are often restricted for some time after a new release to help prevent reverse engineering to find the bug.
Please do not assume people are not running current release just because they are lazy and have not upgraded. The user experience was degraded at FF57 for many individuals who need extensions that will not work with ff>56 or that developers have abandoned out of frustration with Mozilla. When all the extensions I find necessary are functional (or with suitable replacements) I will switch.
https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
"A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw." I'm at a loss imagining how this might work, can anyone expound on this? How might this actually occur?
"A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw." I'm at a loss imagining how this might work, can anyone expound on this? How might this actually occur?
This quote is from https://www.mozilla.org/en-US/security/advisories/mfsa2019-1... . We merged that thread ( https://news.ycombinator.com/item?id=20220804 ) into this one.
I find it really gross that they do not allow others to access it. This behavior damages the forks.
Earlier quoted context omitted.
True they could have been clearer on the versions affected, but tbh you should keep with the latest supported anyway. Security bug reports are often restricted for some time after a new release to help prevent reverse engineering to find the bug.
Please do not assume people are not running current release just because they are lazy and have not upgraded. The user experience was degraded at FF57 for many individuals who need extensions that will not work with ff>56 or that developers have abandoned out of frustration with Mozilla. When all the extensions I find necessary are functional (or with suitable replacements) I will switch.
Earlier quoted context omitted.
True they could have been clearer on the versions affected, but tbh you should keep with the latest supported anyway. Security bug reports are often restricted for some time after a new release to help prevent reverse engineering to find the bug.
Please do not assume people are not running current release just because they are lazy and have not upgraded. The user experience was degraded at FF57 for many individuals who need extensions that will not work with ff>56 or that developers have abandoned out of frustration with Mozilla. When all the extensions I find necessary are functional (or with suitable replacements) I will switch.