Technology news and Jobs 
VIRTUALISATION More flaws fixed in Firefox
VIRTUALISATION More flaws fixed in Firefox | More flaws fixed in Firefox |
|
| by Stephen Withers | |
| Wednesday, 05 August 2009 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
Version 3.5.2 fixes two critical issues, one allowing a privilege escalation, and the other involving instabilities with the potential to allow the execution of arbitrary code. 3.0.13 also fixes a potential arbitrary code vulnerability, and the incorrect handling of SSL certificates (allowing attackers to spoof supposedly secure sites such as banks, or to send maliciously crafted certificates to cause the execution of arbitrary code). One moderate fix applying to both versions addresses a problem that could be use to spoof the URL and SSL indicator on a malicious page. 3.5.2 also overcomes a low-impact issue involving data corruption that occurred when a SOCKS5 proxy sends a reply containing a DNS name that is longer than 15 characters. The other bug fix in 3.5.2 means that images with ICC profiles are now rendered properly on all monitors. The most convenient way for users of Firefox on Windows or Mac OS X to obtain the new version(s) is to take advantage of the Check for Updates command as this avoids the need to download the entire installer. Firefox 3.5.1 was released less than three weeks ago. And that was less than three weeks after the debut of Firefox 3.5. |
Tags
| < Next story in category | Previous story in the category > |
|---|
