Firefox 3.5.2 released to fix critical security problem

Graham Cluley
Graham Cluley
@

 @grahamcluley.com
 / grahamcluley

Firefox
Mozilla, the makers of the Firefox web browser, has issued an important update that fixes a number of security issues – including the problem of how hackers could spoof SSL certificates by inserting null characters into certificates, exposed at the BlackHat conference last week.

In a blog post, Mozilla said that they “strongly recommend that all Firefox users upgrade to this latest release”.

Fortunately Firefox includes automatic updating technology, so users should receive a notification of the update’s availability within 24 or 48 hours. If you wish to install the update manually, you can just choose “Check for Updates” from Firefox’s Help menu.

Of course, in a corporate environment you may choose to roll out the update at your own timescale. But make sure you do continue to keep up-to-date, whichever browser you are choosing to run on your company’s computers.

Sign up to our free newsletter.
Security news, advice, and tips.

Which brings me to a timely reminder. If you’re still using the legacy 3.0 version of Firefox, it really is time to upgrade to version 3.5.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and hosts the popular "Smashing Security" podcast. Follow him on LinkedIn, Bluesky and Mastodon, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.