Well good for firefox users. Firefox gets another update. The latest is Firefox 3.5.4.
Firefox 3.5.4 fixes the following issues:
- Several security issues.
- Fixed several stability issues.
- Added the ability to re-submit crash reports.
- After using Clear Recent History some SSL sites would not load all images and styles without pressing reload.
The issues include:
MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15)
MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
MFSA 2009-62 Download filename spoofing with RTL override
MFSA 2009-61 Cross-origin data theft through document.getSelection()
MFSA 2009-59 Heap buffer overflow in string to number conversion
MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS()
MFSA 2009-56 Heap buffer overflow in GIF color map parser
MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
MFSA 2009-54 Crash with recursive web-worker calls
MFSA 2009-53 Local downloaded file tampering
MFSA 2009-52 Form history vulnerable to stealing.
So what are you waiting for, go and update to the latest version. Feel safer.
Firefox released their latest update Firefox 3.5.2 today. In this update Several security issues are fixed. Also the Images with ICC profiles now render properly on all monitors are fixed.
The security updates include:
- Chrome privilege escalation due to incorrectly cached wrapper
- Crashes with evidence of memory corruption (rv:1.9.1.2/1.9.0.13)
- Location bar and SSL indicator spoofing via window.open() on invalid URL
- Data corruption with SOCKS5 reply containing DNS name longer than 15 characters
In these first two fixes were very critical since these Vulnerabilities can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.
So everyone should install these updates as soon as possible for a safer browsing.
Shortly after the major 3.5 Firefox release, Mozilla has just now pushed out a 3.5.1 update. The major reason being a critical bug which was discovered in Mozilla Firefox 3.5’s new JavaScript engine called TraceMonkey.
This bug affects Firefox’s new JavaScript rendering engine(TraceMonkey) and has been termed as highly critical by the Secunia.com. Hackers can gain control of any user’s system by installing rogue software when they visit an exploited website.
This update also fixes multiple security and stability issues, and improves startup performance for users who were previously having issues. As a bonus, it appears to have fixed our issues with Java-enabled pages hanging.
Get the latest Update from Here.
