Channel Register®

Original URL: http://www.channelregister.co.uk/2006/07/27/firefox_security_update/

Firefox users need to update (again)

Security fix targets JavaScript flaws

By John Leyden

Posted in Software & Security, 27th July 2006 11:57 GMT

Free whitepaper – Solid State Drives and High-Speed Memory

The Mozilla Foundation has released an updated version of Firefox following the discovery of multiple security vulnerabilities involving the popular browser software.

The flaws create a means for hackers to conduct cross-site scripting or to otherwise seize control of vulnerable systems.

Many of the bugs involved the handling of JavaScript code while others involve memory corruption errors, as explained in a run-down by security notification firm Secunia here [1], that contains links to the relevant Mozilla Foundation advisories.

Firefox fans are urged to upgrade [2] to version 1.5.0.5 of the browser software in order to guard against security attacks.

A related set of vulnerabilities - along with a security bug [3] involving the processing of vCard attachments - mean Thunderbird email client and Mozilla SeaMonkey application suite users also need to upgrade to version 1.5.0.5 and version 1.0.3 of these software packages, respectively, as explained here [4] and here [5]. ®