New Security Update for Firefox Fixes High Risk Issues   - 1,922 Views, 5 Comments

Summary: The Mozilla Foundation has just released their Firefox 1.0.5 security update for Firefox, coincidentally at the same time as Microsoft released their own monthly security patches for Windows. Firefox 1.0.5 also upgrades and improves the browser's stability itself, but the most important aspect ...

Previous Article « Nasa Hacker: “I Found More Hackers There. And Aliens Too”
Read Next Article » Couple Fights Over Who Gets Custody of the…Online Game Points?

  Follow Anne on Twitter

The Mozilla Foundation has just released their Firefox 1.0.5 security update for Firefox, coincidentally at the same time as Microsoft released their own monthly security patches for Windows.

Firefox 1.0.5 also upgrades and improves the browser’s stability itself, but the most important aspect of this release is definitely patching some security issues.

Said Michael Sutton, Director of Mozilla’s iDefense Labs, “There are three categories that all the exploits fall into, One category includes issues like frame origin or cross-domain content injection. Those are the vulnerabilities that assist in phishing attacks. About half of the Firefox vulnerabilities fell into that category, at least one for which there was some public exploit code available.”

A dozen security issues have been fixed with Firefox 1.0.5, including issues relating to remote code execution through shared function objects, node spoofing, javascript prompt origin spoofing, a “same origin” violation, code execution using the “Set as Wallpaper” function, and frame-injection spoofing.

Two of the issues are considered critical to fix, while four more are considered high risk.

So, if you are a Firefox user, get yourself over to Mozilla and update your Firefox today.

You can get Firefox security update 1.0.5 here.

New Security Update for Firefox Fixes High Risk Issues

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Nasa Hacker: “I Found More Hackers There. And Aliens Too”
Read Next Article » Couple Fights Over Who Gets Custody of the…Online Game Points?

Read more:

»  Netscape Critical Flaws Fixed with This Week’s Netscape 8.0.3.1 Release

»  Firefox and Mozilla Still at Risk for Spoofing “Frame Injection” Security Flaw

»  Security Hole in Adobe PDF Reader and Acrobat PDF Viewer, Warns Adobe

»  Firefox “Lambda Replace Heap Memory” Security Flaw Reveals Sensitive User Information

For additional similar stories check out our archives on Apple & Mac, Reviews, Security, Windows

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

5 Comments »

  1. Thanks for alerting me about the newest firefox. Is there any way to tell on the browser itself when a new update is available?

    Comment by marthe stein — 7/14/2005 @ 9:10 am

  2. yes it does have an auto update feature and it should pop up with an arrow by the top of firefox towards the left with a green icon..when you click the icon it will download the new installer

    Comment by Corey — 7/14/2005 @ 11:37 am

  3. Had a difficult time downloading. Kept stopping at 50%

    Comment by Richard Manion — 7/14/2005 @ 6:15 pm

  4. both Firefox and roboform go fritzo after download and install v 1.05. Anybody have any idea why? RoboForm works fine on IE after Firefox install, so Firefox and Roboform have some kind of conflict after FireFox upgrade. Will probably reinstall Roboform for starters.

    Comment by Del — 7/15/2005 @ 2:25 pm

  5. I have been using Roboform for a year now. I love the program, and don’t know what I would do without it. I would recommend it. I made a quick video about the program and posted it on squidoo

    Comment by Free Form Filling So — 5/8/2008 @ 5:18 pm

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 7/13/2005
The Internet Patrol
Patrolling the Internet for You!