New Firefox 1.5.0.4 Released
A security update have just been released : Firefox 1.5.0.4. In this release Improvements to product stability in addition to Several security fixes, five of them are critical. It is highly recommanded to upgrade to this new version.
* Privilege escalation using addSelectionListener
* Web site XSS using BOM on UTF-8 pages
* File stealing by changing input type (variant)
* "View Image" local resource linking (Windows)
* Buffer overflow in crypto.signText()
* Remote compromise via content-defined setter on object prototypes
* PLUGINSPAGE privileged JavaScript execution 2
* Privilege escalation through XUL persist
* XSS viewing javascript: frames or images from context menu
* HTTP response smuggling
* Fixes for crashes with potential memory corruption
* EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)
Subscribe to Firefox Magazine's feed