Firefox 3.5.8 Closes Security Holes
- 19 February, 2010 06:13
- Comments
Mozilla yesterday released updates for its Firefox Web browser to shore up vulnerabilities in the 3.5.x and 3.0.x browser versions.
Three critical flaws (MSFA 2010-01, 2010-02 and 2010-03) all involve memory-related errors that could potentially allow an attacker to run any command on a victim PC. According to the advisories, the holes are already fixed in the recently released Firefox 3.6.
The patches also fix two other flaws that could lead to cross-site scripting attacks, but are only rated moderate (MSFA 2010-04 and 2010-05).
The updates are available for Windows, Mac and Linux, and will bump up the browser versions to 3.5.8 or 3.0.18. If you haven't already seen the automatic update pop-up, head to Help | Check for Updates to get the patch.
Come socialise with us! Facebook | LinkedIn
- Bookmark this page
- Share this article
- Got more on this story? Email ARN
- Follow ARN on twitter
- MFSA 2010-01: Crashes with evidence of memory corruption (rv:1.9.1.8/ 1.9.0.18)
- MFSA 2010-02: Web Worker Array Handling Heap Corruption Vulnerability
- MFSA 2010-03: Use-after-free crash in HTML parser
- Firefox 3.6 Brings Performance Improvements, a Few New Features - PCWorld
- MFSA 2010-04: XSS due to window.dialogArguments being readable cross-domain
- MFSA 2010-05: XSS hazard using SVG document and binary Content-Type
- Red Light In the Control Centre Saves Hours of Chaos
- HiveManager Online: Less Dollars, More Sense
- Churchtown Primary School UK Primary School Chooses Aerohive's Reliable, Manageable, Scalable and Economical Controller-less Wireless LAN Architecture
- Premier Media Group Fast Study
- What is Wireless 2.0
-
REVIEW: Is the Samsung Galaxy Tab 10.1 the new king of Android tablets?
-
MySpace: The next hot social network?
-
Datacom joins AFP, Microsoft and ninemsn to support ThinkUKnow
-
Lenovo awarded NSW DET netbook contract
-
Telstra-NBN Co wholesale broadband agreement “imminent”









Comments
Post new comment