Our security is investigating and working on issuing a fix. We are aware of reports of a Firefox add-on vulnerability. We will provide additional details on our blog soon. The issue reported by Tavis Ormandy has been resolved. Based on his tweet, it could reveal a user's password, but not all of the details have been revealed yet. The first vulnerability has apparently not been addressed yet, which Ormandy mentions may be the result of Mozilla needing time to review the updated extension before pushing it to users.
Last week Ormandy mentioned finding an exploit in one version of its extension for Firefox, before following that up with a new bug that affected both Chrome and Firefox, and finally a third vulnerability that could allow "stealing passwords for any domain."
Last year Google Project Zero researcher Tavis Ormandy quickly found some " obvious" security problems in the popular password manager LastPass, and now he's done it again.
0 kommentar(er)
