Firefox 3.5.8 Closes Security Holes
- 19 February, 2010 06:13
- Comments
Mozilla yesterday released updates for its Firefox Web browser to shore up vulnerabilities in the 3.5.x and 3.0.x browser versions.
Three critical flaws (MSFA 2010-01, 2010-02 and 2010-03) all involve memory-related errors that could potentially allow an attacker to run any command on a victim PC. According to the advisories, the holes are already fixed in the recently released Firefox 3.6.
The patches also fix two other flaws that could lead to cross-site scripting attacks, but are only rated moderate (MSFA 2010-04 and 2010-05).
The updates are available for Windows, Mac and Linux, and will bump up the browser versions to 3.5.8 or 3.0.18. If you haven't already seen the automatic update pop-up, head to Help | Check for Updates to get the patch.
Nominations for the 2012 ARN IT Industry Awards open on Tuesday, June 12.
- Bookmark this page
- Share this article
- Got more on this story? Email ARN
- Follow ARN on twitter
- MFSA 2010-01: Crashes with evidence of memory corruption (rv:1.9.1.8/ 1.9.0.18)
- MFSA 2010-02: Web Worker Array Handling Heap Corruption Vulnerability
- MFSA 2010-03: Use-after-free crash in HTML parser
- Firefox 3.6 Brings Performance Improvements, a Few New Features - PCWorld
- MFSA 2010-04: XSS due to window.dialogArguments being readable cross-domain
- MFSA 2010-05: XSS hazard using SVG document and binary Content-Type
- Spectra Logic and Australian National University Success Story - March 2012
- Aberdeen Group: Building Business Resilience Through Active Archive
- In Search of the Long-Term Archiving Solution —Tape Delivers Significant TCO Advantage over Disk
- Premier Media Group Fast Study
- Red Light In the Control Centre Saves Hours of Chaos
-
Facebook could buy Nokia to build 'FacePhone', expert claims
-
It's not all Doom at new media conference
-
Tech Watch: Who watches the datacentre?
-
Facebook scammers host Trojan horse extensions on the Chrome Web Store
-
Webroot: Growth in security














Comments
Post new comment