Firefox issues eight patches for web browser

• READ
• COMMENTED
• SHARED

• Exclusive: Gen-i to launch iPhone sales, support
• No mandate for all-of-government tender
• PC assemblers eye massive govt tender
• FryUp: ACTA warmup
• Hosted Drupal CMS planned for midyear

• Deskop Linux is still not happening
• CallPlus unbundles Hamilton, offers 'data banking'
• IE9 proves Microsoft is back in the browser battle, says analyst
• Gen-i to launch iPhone sales, support
• Government outlines rural telecommunications plan

• ‘Veneer’ of integration likely for Auckland
• Exclusive: Gen-i to launch iPhone sales, support
• Some subtle tips for standout interviews
• CallPlus unbundles Hamilton, offers 'data banking'
• Broadband use grows; mobile internet still to take off

 

• Tailored enterprise security solutions needed: Trend Micro
• Rent-a-CIO
• Chink in the mobile-phone duopoly
• NASA’s tips for a stellar social media policy
• Tweeps and Facebook friends, let's smarten up

 

• SUBSCRIPTIONS
• NEWSLETTERS
• NEWSFEED

Computerworld is New Zealand's only specialised information systems fortnightly.

Subscribe now for $97.50 (24 issues) and save more than 37% off the cover price!

Get the latest news from Computerworld delivered via email.
Sign up now

Subscribe to Computerworld's
RSS newsfeed here and get news stories as they break.

• Hackers offered $100,000 for browser and phone exploits
• IE9 proves Microsoft is back in the browser battle, says analyst
• Online, under-the-radar malware hazards
• Microsoft's EU ballot fails to randomise browser order
• FSF calls on Google to free the On2 video codec
• Google Chrome chips away at Microsoft IE

Mozilla has issued eight patches for its Firefox web browser, three of which fix problems classified as critical.

The patches come after security experts have recommended using a browser other than Microsoft's Internet Explorer 7 and older versions of IE due to a dangerous vulnerability. Microsoft is due to release an emergency patch for that problem Wednesday.

Two of the critical Firefox problems could allow an attacker execute a cross-site scripting attack, in which scripts or commands from one web application that shouldn't run in another are successfully executed. The third problem relates to Firefox's browser engine, and could make it crash or possibly allow someone to remotely execute code on a PC, Mozilla said in its advisory.

Mozilla defines a critical vulnerability as one that could allow an attacker to run code on a machine in the course of normal Web browsing.

The patches are for Firefox version numbers 3.04 and 2.0.0.18. Mozilla has said this round of patches will be the last for Firefox 2, which it will now stop supporting. The update also removes the phishing filter in Firefox 2 because the browser uses an outdated version of a protocol used to import a blocklist of phishing sites supplied by Google. Firefox 2 users are being promoted to upgrade to Firefox 3.

Firefox's auto-update mechanism should automatically download these latest patches, and users will be prompted to restart the browser to complete the process.