Thursday, 28 May 2009

Mozilla Firefox 3.0.6 Released [Javascript Exploit & Display Issues Resolved]

Just a very brief heads-up to let you know, if you didn’t already,
that Mozilla have just made Firefox 3.0.6 - which, of particular note,
serves to resolve a security flaw in the implementation of Javascript
that could potentially allow hackers to inject and run unauthorized code
via an exploit -available for download.

According to Mozilla’s release notes, Firefox 3.0.6 comes with the
following security fixes:

Directives to not cache pages ignore (Low Threat)
XMLHttpRequest allows reading HTTP Only cookies {Low Threat)
Chrome privilege escalation via local .desktop files (Moderate Threat)
Local file stealing with SessionStore (High Threat)
XSS using a chrome XBL method and window.eval (High Threat)
Crashes with evidence of memory corruption (rv:1.9.0.6) (Critical Threat)


You can download Firefox 3.0.6 now via Mozilla.

No comments:

Analytics and Statistic

Blog Archive