Mozilla patches critical Firefox flaws
302247
Mozilla issued 10 patches on Friday for its Firefox browser, including three for critical vulnerabilities. The latest version of Firefox is now 2.0.0.12.One of the critical vulnerabilities, MFSA 2008-06, is a problem in the way the browser handles images on certain Web pages.It&#39;s possible to exploit the flaw to steal a person&#39;s Web browsing history, forward that information and then crash the browser. It may also be possible to run arbitrary code on a machine, Mozilla said.A second critical vulnerability can enable a privilege escalation attack or remote code execution.The last critical problem involves a memory corruption flaw that &quot;we presume that with enough effort at least some of these could be exploited to run arbitrary code,&quot; Mozilla said.Also notable is a fix for a problem with Mozilla&#39;s &quot;chrome&quot; protocol, which is the term Mozilla uses for its user interface. The problem involves some of Firefox&#39;s add-ons, or applications that users can download which extend browser functionality.The vulnerability would let an attacker determine what applications are installed on a person&#39;s PC, which could give clues to how the machine could be compromised, Mozilla said. However, a victim would have to be lured to a special malicious Web page designed to take advantage of the flaw.&#160;
47409
Mozilla works to fix a Firefox browser flaw that could give attackers unauthorized access to data on a victim's PC.
53150
Mozilla's latest pre-release version of its browser remains buggy, but performance enhancements give us reason to get excited. In Monkey Bites.
588768
InfoWorld - Mozilla has released a critical security update to Firefox, taking a third shot at patching bugs in the way the browser can be used to launch programs from Web links.
766601
What do Internet Explorer, Mozilla's browsers, and Opera all have in common? Bugs.
747017
Mozilla is investigating hacker claims that the Web browser has a serious flaw in the way it handles JavaScript.
332579
The Mozilla Foundation has released Firefox 2.0.0.8, introducing support for Mac OS X 10.5 'Leopard' in the release.
363317
Mozilla has issued 10 patches including three for critical vulnerabilities.
619489
In the very week Mozilla Firefox Version 1.0 was launched, a series of potentially nasty security holes have been uncovered in older versions of the browser.
445454
Mozilla chief security officer says Firefox has the same flaw that the company called a "critical vulnerability" in IE, patch is in the works.
752478
InfoWorld - Mozilla issued 10 patches on Friday for its Firefox browser, including three for critical vulnerabilities. The latest version of Firefox is now 2.0.0.12.
750620
(InfoWorld) - Mozilla Corp. developers have released an updated version of their Firefox browser that fixes a number of security issues, four of them rated critical. The update was released late Thursday, and Firefox users should receive the 1.5.0.7 patches via the browser's automatic update system over the next few days, according to Mozilla. Research firm Secunia rates the flaws as "highly critical," saying that they can be exploited to "conduct man-in-the-middle, spoofing, and cross-site scripting attacks, and potentially compromise a user's system," according toÂ this Secunia alert. In addition to the four critical patches, the software also fixes three less-critical issues and offers some stability enhancements according to the Mozilla Web site, which also includesÂ details about the security vulnerabilities. Browser hackers have traditionally focused on Microsoft Corp.'s Internet Explorer, but as Firefox's market share has grown it has become a more attractive target. Firefox is now used by about 13 percent of Web surfers, according to research firm OneStat.com. It has been a busy week for IT administrators looking to stay on top of security. Important security patches were also released by Microsoft Corp. and Apple Computer Inc. On Tuesday, Microsoft releasedÂ its monthly set of security patches, fixing a critical bug in its Publisher product. The company also re-released two of its August patches to fix bugs in the updates. That was followed Wednesday by Apple's fix for its QuickTime multimedia software. This update, rated as highly critical by Secunia, fixes six bugs in the product. More details on the QuickTime update can be found onÂ this page of Apple's Web site. Â
630854
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim's machine.
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
281014
The update tackles seven flaws in the open-source Web browser, including four rated "critical."
585748
Mozilla Corp. released updated versions of Firefox Friday to patch 14 vulnerabilities, three of them critical, but it pushed out the new versions without fixing several flaws.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.