July 19th, 2007
3 critical flaws fixed in Firefox 2.0.0.5
An automatic update to Mozilla Firefox 2.0.0.5 last night closed 8 security holes, 3 of which were listed as “critical”, according to the release notes. Fixes include:
Critical
- MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer
- MFSA 2007-21 Privilege escalation using an event handler attached to an element not in the document
- MFSA 2007-18 Crashes with evidence of memory corruption
High
- MFSA 2007-24 Unauthorized access to wyciwyg:// documents
- MFSA 2007-19 XSS using addEventListener and setTimeout
Moderate
- MFSA 2007-25 XPCNativeWrapper pollution
Low
- MFSA 2007-22 File type confusion due to %00 in name
- MFSA 2007-20 Frame spoofing while window is loading
Ed Burnette is a professional developer and author of several articles and books about computing including Hello, Android: Introducing Google's Mobile Development Platform, 2nd Edition. For disclosure of Ed's industry affiliations, click here or to view his full profile click here.
Subscribe to Dev Connection via Email alerts or RSS.
| 07/19/07
