Firefox 3.6.2 Released To Address Critical Vulnerability

Firefox 3.6.2 has been released ahead of schedule, due to a critical security flaw involving the Web Open Font Format (WOFF) introduced in Firefox 3.6, which could allow an attacker to crash a person’s browser, or even run arbitrary code on the person’s machine (a big no-no in terms of security). If you’re currently using Firefox 3.6, the automated update notification should buzz you within 24 to 48 hours, but you can always apply the update manually by selecting “Check for Updates” from the Help menu. Considering the severity of this issue, it’s best to take a quick peek at your Firefox version right now.

Official blog post.