"Mozilla investigates critical Firefox 3.0 bug Mozilla grapples with first Firefox 3 security problem Mozilla yesterday downplayed a threat posed by the first vulnerability reported for Firefox 3.0, telling users that the risk is "minimal." "There is no public exploit, the details are private, and so the risk to users is minimal," Window Snyder, Mozilla's chief security officer, said in an entry to a company blog. According to the security company that reported the vulnerability to Mozilla, the bug is present in the Windows, Mac OS X and Linux versions of Firefox. Snyder was responding to news Wednesday that 3Com's TippingPoint, a security vendor that runs the Zero Day Initiative bug bounty program, had purchased a critical Firefox 3.0 vulnerability from an unnamed researcher and then forwarded information on the bug to Mozilla." Full report here
