#Lastpass firefox Patch

Ormandy detailed how passwords could have been extracted from LastPass if hackers were to exploit them by attracting users to a malicious website then making calls to LastPass application programming interfaces (APIs) or running arbitrary code while appearing as a trusted party. Two bugs were discovered to have affected extensions in Firexfox version 3.3 2, while only a single bug blighted the LastPass browser add-on in Chrome. LastPass rapidly squashed the bugs before they could be exploited.

The bug report follows mere days after Ormandy informed LastPass over a trio of bugs affecting its extension for GoogleвЂ™s Chrome browser and Firefox. The exploit affected LastPass 4.1.43 Firefox browser extension. So you can expect a more detailed post mortem once this work is complete,вЂќ said Joe Siegrist of LastPass. вЂњWe donвЂ™t want to disclose anything specific about the vulnerability or our fix that could reveal anything to less sophisticated but nefarious parties. The flaw was found by Google PRoject Zero security researcher Travis Ormandy, who reported reported the bug to LassPass, which hurried to fix it.

#Lastpass firefox Patch

Updated: Password manager LastPass has rushed to patch yet another flaw in its browser extension for Firefox that could have enabled a hacker to gain full code execution on a targeted machine.