Latest Mozilla releases fix 10 security flaws
292045
At least three critical vulnerabilities are among those fixed by the most recent versions of Mozilla, Firefox and Thunderbird.
725728
InfoWorld - The Mozilla Foundation has published a fix for a &quot;critical&quot; JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
53150
Mozilla's latest pre-release version of its browser remains buggy, but performance enhancements give us reason to get excited. In Monkey Bites.
149856
InfoWorld - Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim's machine.
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.
640391
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim&#39;s machine.The problem is similar to other&#160;data leakage&#160;flaws found in the open-source browser, according to researcher Gerry Eisenhaur, who first reported the problem on Saturday.Eisenhaur has posted sample code that reads the contents of a Mozilla Thunderbird preferences file, but he believes that attackers could get access to more information with variations on his attack. &quot;It&#39;s possible to load any JavaScript file on a victim&#39;s machine,&quot; he wrote in his blog posting. &quot;This looks very interesting and may have bigger potential, but for now, it&#39;s just another information disclosure [flaw].&quot;&quot;It could become something more if there was an application that stored sensitive data inside JavaScript files,&quot; he said via instant message. &quot;Some plugins have been known to store usernames and passwords.&quot;&quot;Its also just a powerful way to do recon,&quot; he added.Hackers have discovered a number of flaws in recent months that take advantage of the way that browsers pass information between different components within the Windows operating system. Some of these URI (Uniform Resource Identifier) protocol handler flaws have led to serious security problems for both Firefox and Internet Explorer.This latest flaw affects only certain Firefox add-ons, such as the Download Statusbar or Greasemonkey, which store scripts in a fashion that lets them be discovered on the hard drive, said Window Snyder, Mozilla&#39;s security chief in a Wednesday blog posting.Firefox is investigating the issue and has rated it as a low-severity problem, she said.
128419
Ziff Davis - The update fixes about eight vulnerabilities, including an image file problem and printing and networking holes.
445454
Mozilla chief security officer says Firefox has the same flaw that the company called a "critical vulnerability" in IE, patch is in the works.
492868
TechWeb - A new proof-of-concept code is circulating for a Firefox vulnerability that was fixed in Mozilla's security update that was released last week.
425039
Mozilla earlier this week issued a public beta of the next version of its Thunderbird e-mail client. In addition, it said it was delaying a planned security update to Firefox for unspecified reasons.
116046
Help on the way Mozilla's chief of security has confirmed a vulnerability that could cause fully patched versions of Firefox to expose a user's private data.â¦
297679
Mozilla has released alpha 8 of its Firefox 3.0 Web browser, unveiling for the first time to users several security features it's talked up for months.
299
Updated: A &quot;cumulative security update&quot; plugs eight holes in the Internet Explorer browser, while other patches address &quot;critical&quot; vulnerabilities in the Windows shell, in SMTP and elsewhere.
115827
Blog: Critical security flaw found in Firefox 2.0 and later versions potentially puts users' systems at risk of a remote attack.
188255
Pass the parcel bug binned Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.â¦
572892
Four new unpatched vulnerabilities have been published for Internet Explorer and Firefox, with two coming for each browser.
750620
(InfoWorld) - Mozilla Corp. developers have released an updated version of their Firefox browser that fixes a number of security issues, four of them rated critical. The update was released late Thursday, and Firefox users should receive the 1.5.0.7 patches via the browser's automatic update system over the next few days, according to Mozilla. Research firm Secunia rates the flaws as "highly critical," saying that they can be exploited to "conduct man-in-the-middle, spoofing, and cross-site scripting attacks, and potentially compromise a user's system," according toÂ this Secunia alert. In addition to the four critical patches, the software also fixes three less-critical issues and offers some stability enhancements according to the Mozilla Web site, which also includesÂ details about the security vulnerabilities. Browser hackers have traditionally focused on Microsoft Corp.'s Internet Explorer, but as Firefox's market share has grown it has become a more attractive target. Firefox is now used by about 13 percent of Web surfers, according to research firm OneStat.com. It has been a busy week for IT administrators looking to stay on top of security. Important security patches were also released by Microsoft Corp. and Apple Computer Inc. On Tuesday, Microsoft releasedÂ its monthly set of security patches, fixing a critical bug in its Publisher product. The company also re-released two of its August patches to fix bugs in the updates. That was followed Wednesday by Apple's fix for its QuickTime multimedia software. This update, rated as highly critical by Secunia, fixes six bugs in the product. More details on the QuickTime update can be found onÂ this page of Apple's Web site. Â