Mozilla patches 11 bugs in Firefox

[Guest ~BD~]

September 24, 2008 (Computerworld) Mozilla Corp. late Tuesday patched 11 vulnerabilities in Firefox

3.0, more than half of them labeled "critical," and fixed 14 flaws in the older Firefox 2.0.

 

Firefox 3.0.2 quashes six critical bugs, four marked "high" and one pegged as "low" in Mozilla's

four-step threat ranking system. Among the most serious were four stability bugs in the browser's

graphics rendering, layout and JavaScript engines that can crash the program and might be

exploitable with malicious code.

 

"Some of these crashes showed evidence of memory corruption under certain circumstances and we

presume that with enough effort at least some of these could be exploited to run arbitrary code,"

said Mozilla in the accompanying advisory.

 

Mozilla also updated the older Firefox to 2.0.0.17, patching all but one of the bugs fixed in 3.0.2,

but also addressing several issues specific to the aging browser.

 

See:

http://www.computerworld.com/action/articl...NLT_SEC&nlid=38