Reader Comments (Page 1 of 1)

"That flaw was patched last week, but now, just a few days later, another security hole has been found. It's called the "Unicode Data Remote Stack Buffer Overflow Vulnerability," and, as of now there's no fix from Mozilla."

This is absolutely wrong. It is neither a stack buffer overflow nor an exploitable crash.

" Should you be worried? Probably not, as it's unlikely that more than a handful of sites are using this exploit, and they're surely relegated to the darkest corners of the Web."

There is no exploit. The crash is not exploitable. Please read Mozilla's official announcement explaining this:

http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/