Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.

Firefox version 2.0.0.5 also fixes a number of memory corruption and privilege escalation flaws, as explained in Mozilla's release notes here.

The release - available in Mac, Windows and Linux flavours - will be automatically pushed out to users within the next two days. Users still running running Firefox 1.5.0.x, which is no longer supported, are urged to upgrade to the Firefox 2 series.

In other security bug-related news, independent security researcher Michal Zalewski has unearthed a vulnerability in Internet Explorer, which might be exploited by a malicious website to spoof the address bar. The unpatched bug allows con-men to create more convincing phishing and revolves around flaws in the way IE7 implements the "document.open()" method of opening new browser windows.

An even more severe client-side risk comes from a pair of unpatched flaws in the Trillian multi-protocol IM client. Users are urged to disable the "aim://" URI handler in Trillian as a workaround, pending the delivery of security updates. ®

Related stories

Microsoft to search browsers for JavaScript compatibility (1 November 2007)
Bad hair day for alternative browser users (19 October 2007)
Firefox leak could divulge sensitive info (13 August 2007)
Making open-source browsing safe for the masses (2 August 2007)
Firefox update fixes bug brace (31 July 2007)
Mozilla confirms own URL handling bug (25 July 2007)
Facebook buys Firefox startup (23 July 2007)
A serious browser vulnerability, but whose? (11 July 2007)
Flaws galore in IE and Firefox (5 June 2007)
Mozilla quashes Firefox JavaScript peril (1 June 2007)
Mozilla patches faulty patch (7 March 2007)
Firefox hands out cookies from strangers (15 February 2007)
IE and Firefox cough up hard drive contents (13 February 2007)
Firefox 2.0: happier browsing, but secure? (30 January 2007)
IE 'unsafe' for 284 days last year (5 January 2007)
Firefox update guards against critical flaws (21 December 2006)
Mozilla flaws more joke than jeopardy (5 October 2006)
Just how buggy is Firefox? (8 September 2006)
'Firefox flaw wrecked my relationship' (23 March 2006)