Service provider of security Secunia posted information about critical security affected in addition to Firefox called Wikipedia Toolbar. Found a potential vulnerability allows attackers to discredit the system.

Concern

According to the report, the problem is to call the eval function () javascript without a thorough check of reported performance. Since the use of additives javascript engine operates with the highest possible privileges, so the computer's resources are available using the appropriate operating system functions mapped requests to the interpreter.

A prerequisite for the attack is to persuade the user that clicks on one of the buttons in the toolbar is displayed in the appendix when you visit a malicious Web page, respectively.

The vulnerability was found in version 0.5.9 the extension, but it probably also affected by the issue earlier.

Solution

In Revision 0.5.9.2 marked as a problem has been eliminated, but the issue is marked as experimental for now.