Science and technology news blog

I got up in the morning and started my computer. Lo and behold, Firefox had another update. This time its 2.0.0.5 the version number. Mozilla foundation provides a full list of current vulnerabilities here. The main patches that were fixed are as follows:

1. XPCNativeWrapper pollution


2. Unauthorized access to wyciwyg:// documents


3. Remote code execution by launching Firefox from Internet Explorer


4. File type confusion due to %00 in name


5. Privilege escalation using an event handler attached to an element not in the document


6. Frame spoofing while window is loading


7. XSS using addEventListener and setTimeout


8. Crashes with evidence of memory corruption

This entry was posted on Thursday, July 19th, 2007 at 11:26 am and is filed under Firefox. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.