Mozilla Firefox and Opera Vulnerability

US-CERT is aware of public reports of a vulnerability in Mozilla Firefox and Opera web browsers.  This vulnerability is caused by improper handling of bitmap image files (.bmp). By sending a specially crafted bitmap image file to the browser, an attacker may be able to obtain sensitive information or cause a denial-of-service condition.

US-CERT encourages Mozilla Firefox users to upgrade to Firefox 2.0.0.12 and Opera users to upgrade to Opera 9.25.

US-CERT will provide more information as it becomes available.