Patch Releases for Firefox Vulnerability That Could Expose Tor Users

Mozilla has released a patch for the Firefox vulnerability that can be used to expose Tor users. The team behind the Tor browser has adopted the patch in its browser and released a new version.

Mozilla leave know that it has developed a patch after being recently made aware of an exploit that took advantage of an as-yet-unknown Firefox vulnerability. On Wednesday, the organization reported that the patch was in development. By allowing a victim to load a web page containing malicious javascript and svg code, it was possible to obtain the mac and ip address. The exploit itself only works on Windows, according to Mozilla, but the vulnerability that underlies it also exists on Linux and macOS.

The team behind the Firefox-based Tor Browser reports that it has now released version 6.0.7, which includes the Mozilla patch. According to the team, users who had the security slider set to “high” in Tor were safe from the exploit. It is recommended to perform the update immediately and restart the Tor browser, according to the organization. An update for the ‘hardened’ and the alpha version of the anonymous browser will follow, so it is recommended to use the stable version.

Mozilla reports that it cannot say for sure whether the exploit is the same one used by the FBI to identify suspects in a child pornography case. According to the organization, there are similarities between the exploits, which has created a lot of speculation.