Critical Firefox update released
Posted: Fri May 13, 2005 10:27 am
Version 1.0.4 of the browser should be seen as a mandatory update for all Firefox users. It addresses the following three critical bugs in the software:
• Privilege escalation via non-DOM property overrides
• "Wrapped" java script: urls bypass security checks
• Code execution via java script: IconURL
As well as addressing the above problems, the new version of the software fixes certain DHTML errors which are encountered at some web sites.
We would highly recommend that all Firefox users update to the latest version of the software as soon as possible, either by using the browsers own internal update mechanism or by downloading the software from the Firefox homepage.
It may be worrying that critical flaws keep being found in the supposedly secure Firefox browser, but the incredibly quick fix times should help to reassure users that Firefox really is the better option.
[url=\"http://www.mozilla.org\"][u]Mozilla.org[/u][/url]
[url=\"http://itvibe.com/news/3524/\"][u]Source[/u][/url]
• Privilege escalation via non-DOM property overrides
• "Wrapped" java script: urls bypass security checks
• Code execution via java script: IconURL
As well as addressing the above problems, the new version of the software fixes certain DHTML errors which are encountered at some web sites.
We would highly recommend that all Firefox users update to the latest version of the software as soon as possible, either by using the browsers own internal update mechanism or by downloading the software from the Firefox homepage.
It may be worrying that critical flaws keep being found in the supposedly secure Firefox browser, but the incredibly quick fix times should help to reassure users that Firefox really is the better option.
[url=\"http://www.mozilla.org\"][u]Mozilla.org[/u][/url]
[url=\"http://itvibe.com/news/3524/\"][u]Source[/u][/url]