The Register®

Original URL: http://www.theregister.co.uk/2006/07/27/firefox_security_update/

Firefox users need to update (again)

Security fix targets JavaScript flaws

By John Leyden

Posted in Applications, 27th July 2006 11:57 GMT

Free whitepaper – The top 5 server monitoring battles

The Mozilla Foundation has released an updated version of Firefox following the discovery of multiple security vulnerabilities involving the popular browser software.

The flaws create a means for hackers to conduct cross-site scripting or to otherwise seize control of vulnerable systems.

Many of the bugs involved the handling of JavaScript code while others involve memory corruption errors, as explained in a run-down by security notification firm Secunia here (http://secunia.com/advisories/19873), that contains links to the relevant Mozilla Foundation advisories.

Firefox fans are urged to upgrade (http://www.mozilla.com/firefox) to version 1.5.0.5 of the browser software in order to guard against security attacks.

A related set of vulnerabilities - along with a security bug (http://www.mozilla.org/security/announce/2006/mfsa2006-49.html) involving the processing of vCard attachments - mean Thunderbird email client and Mozilla SeaMonkey application suite users also need to upgrade to version 1.5.0.5 and version 1.0.3 of these software packages, respectively, as explained here (http://secunia.com/advisories/21228/) and here (http://secunia.com/advisories/21229/). ®