TAG | More critical holes plugged by Firefox updates |
|
| by Stephen Withers | |
| Thursday, 13 November 2008 | |
|
Firefox 3.0.4 fixes multiple bugs that the developers say could potentially be exploited to run arbitrary code, a bug in the session restore feature that could be exploited in cross site scripting attacks or to escalate JavaScript privileges, and bugs in HTTP index response parsing and DOM construction that can be used to cause the execution of arbitrary code. Two high, two moderate and one low impact security issues are also fixed by the release. Other bug fixes address problems relating to stored passwords and saving proxy settings. Additional changes include miscellaneous stability improvements, an updated version of the Public Suffix list, and support for additional EV (Extended Validation) root certificates. Icelandic and Thai are now officially supported, with beta support for Bulgarian, Esperanto, Estonian, Latvian, Occitan and Welsh. A user interface issue relating to Japanese, Korean, Chinese and Indic has also been fixed. Firefox 2.0.18 is a security update only, as Firefox 2 is no longer being developed and support is scheduled to end next month. It fixes six critical issues, along with three high, one moderate and one low impact vulnerabilities. Some of the fixes are common to Firefox 2 and 3. The updates can be obtained by using Firefox's built-in updating mechanism, or by downloading new versions of the browser from www.getfirefox.com
|
Tags
| < Next story in category | Previous story in the category > |
|---|
