Firefox update plugs multiple vulnerabilities

Stephen Withers
Thursday, 22 July 2010 09:57

Business IT - Open Source

Firefox 3.6.7 fixes multiple security vulnerabilities, including eight classified as critical.

Fourteen security-related issues have been fixed in Firefox 3.6.7. Eight were rated critical, two as high, and four as being of moderate impact.

The critical issues included potential remote code execution triggered by a maliciously formed PNG image, malicious CSS coding, or malicious web pages containing a very large number of items to be handled by plugins.

The high-impact vulnerabilities both had the potential to allow data to be 'stolen' from one site by another.

The moderate issues related to data being accessible across domains, methods for spoofing the contents of the location bar, and a text handling flaw that might be used in cross-site scripting attacks.

A number of unspecified stability fixes are also included in the update.

CONTINUED