Cert-In flags bugs in Chrome, Mozilla products

Pune: The Indian Computer Emergency Response Team (Cert-In) has flagged certain vulnerabilities in some older versions of the Google Chrome OS and Mozilla Firefox browsers which could allow hackers access to sensitive information.

These vulnerabilities, it said, could also allow a remote hacker to execute arbitrary code and bypass security, perform spoofing attacks and cause a denial of service attack on the targeted system. The agency recommended that users upgrade to the newer versions of the OS and browser to remain protected.

According to an advisory published by Cert-In, the vulnerabilities are present in the Chrome OS and Mozilla Firefox iOs and Firefox version prior to 101, and Mozilla Thunderbird and Mozilla Firefox ESR prior to version 91.10.


“A remote attacker could exploit these vulnerabilities by convincing a victim to open a specially crafted web request,” it said in case of the bugs in Mozilla products. The bug in Google Chrome could allow an attacker to execute arbitrary code on the targeted system.

Cybersecurity experts said users should ensure that their operating systems and browsers are routinely updated so that they have the latest security patches put out by the companies.