Mozilla is working on a patch for the recently disclosed critical bug in Firefox that has been exploited on at least one prominent Web site this week. The vulnerability in Firefox is being used by attackers in drive-by download attacks to install malware on victims machines. Mozilla s security team said that the bug is critical and affects versions 3.5 and 3.6 of the Firefox browser. Users can protect themselves against the exploit for the time being by either installing the NoScript plugin for Firefox or disabling JavaScript.
Source: https://threatpost.com/mozilla-confirms-critical-firefox-bug-readies-fix-102710/74612/