Mozilla releases security updates
548226
Updates to both old and new versions of Firefox and Thunderbird seek to address security and stability issues.
104614
The Mozilla Project has issued a warning for a series of &quot;highly critical&quot; security holes in three of its core projects, including its flagship Firefox Web browser and the Thunderbird e-mail client.
544674
Mozilla has released Thunderbird 1.0, an open-source e-mail client that complements its Firefox Web browser. Mozilla says the e-mail program will help users avoid spam and viruses, and
188255
Pass the parcel bug binned Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.â¦
7141
(Article Central) Microsoft released its October batch of security advisories this week, with a number of &quot;critical&quot; patches, including a significant fix for the Internet Explorer browser.
307137
Mozilla has pushed to users minor upgrades to both Firefox and the Thunderbird e-mail client, with both including seven security patches each and improvements to product stability.
553989
Basic authentication sucks Flaws in the way the latest version of Mozilla Firefox presents authentication dialog boxes leave the door open for cybercrooks to trick users into handing over login credentials, a leading security researcher warns.â¦
297679
Mozilla has released alpha 8 of its Firefox 3.0 Web browser, unveiling for the first time to users several security features it's talked up for months.
474020
The latest beta of Mozilla's browser has been up and running for
425039
Mozilla earlier this week issued a public beta of the next version of its Thunderbird e-mail client. In addition, it said it was delaying a planned security update to Firefox for unspecified reasons.
712878
Mozilla has released a critical security update to Firefox, taking a third shot at patching bugs in the way the browser can be used to launch programs from Web links.The bug, rated &quot;moderate&quot; by Mozilla, lies in the URI (Uniform Resource Identifier) protocol handling technology that is used to launch programs -- an e-mail client for example -- from within the browser. Over the past few months, security researchers have been discovering an increasing number of ways that this technology can be misused, often as a way to install unauthorized software on a victim&#39;s computer.The URI patch is one of eight security bug-fixes that Mozilla has pushed out with the 2.0.0.8 update, released late Thursday.Mozilla developers originally thought that the issue lay within Microsoft&#39;s Internet Explorer software, which could be invoked in a malicious fashion via Firefox. Several days after issuing their first patch, however, they realized that there was a problem with Firefox as well, and rushed out the 2.0.0.6 update.Now, three months after that fix, they&#39;ve patched another URI bug in Firefox that will cut down on the likelihood of programs being launched maliciously through the browser. The 2.0.0.6 release &quot;did not prevent the incorrect file-handling programs from launching which left some risk,&quot; Mozilla said in its advisory . &quot;An additional fix has been applied to Firefox 2.0.0.8 that detects when Windows would mishandle these URIs so that the wrong program does not get launched.&quot;Mozilla developers weren&#39;t certain that this latest twist on the URI problem could really be exploited in Firefox, but they decided to issue this latest URI patch rather than wait to find out for certain, said Window Snyder, Mozilla&#39;s security chief. &quot;We could just say this particular vector is not an issue because we do not have proof,&quot; she said. &quot;We could leave it alone. Rather than spend our time analyzing whether this is a vector that could be vulnerable, we would rather put the block in place and eliminate the possibility. This is a defense-in-depth measure.&quot;Microsoft has said that it plans to patch underlying components in the Windows operating system in an effort to prevent URI protocol handler attacks, and that will probably go a long way in preventing new attacks from cropping up, said Andrew Storms, director of security operations, with nCircle Network Security. &quot;We have to applaud the Mozilla team for attempting to protect their users, but in the end, it&#39;s going to be a Microsoft responsibility,&quot; he said.Of the eight vulnerabilities patched Thursday, two are rated critical by Mozilla.The 2.0.0.8 release also adds support for Apple&#39;s Mac OS X 10.5 operating system, code-named Leopard, although Mozilla warns &quot;there are some known issues affecting some media plugins,&quot; on this platform.
292045
At least three critical vulnerabilities are among those fixed by the most recent versions of Mozilla, Firefox and Thunderbird.
363317
Mozilla has issued 10 patches including three for critical vulnerabilities.
696978
The update for the Mozilla browser fixes an unusual vulnerability that could cause malicious code to run if the browser is launched by Microsoft's IE.
752478
InfoWorld - Mozilla issued 10 patches on Friday for its Firefox browser, including three for critical vulnerabilities. The latest version of Firefox is now 2.0.0.12.
369010
(InfoWorld) - Mozilla patched its flagship Firefox browser Thursday with fixes for six vulnerabilities, one of which was stamped "critical" by the open-source developer. This was the third time Mozilla has updated Firefox in 2007. The updates bring the current browser to Version 2.0.0.4 and the 2005 edition to 1.5.0.12. MFSA 2007-12, the most serious of the six, patched 30 separate memory corruption bugs in the browser layout and JavaScript engines. Even Mozilla seemed unsure of their impact. "Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort, at least some of these could be exploited to run arbitrary code," the advisory read. Mozilla warned Thunderbird and SeaMonkey that their e-mail software, which shares Firefox's layout engine, may be vulnerable to these bugs as well. The developers recommend that users do not enable JavaScript in Thunderbird or the mail portion of SeaMonkey. The updates also fix a pop-up bug that could be used to mask parts of the browser, such as the address bar; a cross-site scripting vulnerability; a problem with how the browsers handle cookies; and a flaw that could let attackers crash Firefox using its autocomplete feature. Firefox 2.0.0.4 can be downloaded from the Mozilla Web site for Windows, Mac OS X, and Linux; Firefox 1.5.0.12, meanwhile, is available from a different page. Current users can also update using the Check for Updates command in the help menu. Mozilla also reiterated that Thursday's patches would be Firefox 1.5's last and said that an update to Firefox 2.0.0.4 would be offered to its users "over the coming weeks." Although Firefox ended 2006 on an upbeat security note according to Symantec -- the anti-virus vendor tallied 40 patches in the last six months of the year, 26 percent fewer than the 54 released for rival browser Internet Explorer -- so far this year, Mozilla has addressed more than twice as many vulnerabilities as IE. In the first five months of 2007, 22 bugs in Firefox have been patched, nine of which were pegged as critical. Microsoft has fixed only eight in IE; seven were labeled critical.
519764
Cure worse than disease The Mozilla Foundation has patched a faulty patch that was itself subject to a security vulnerability.â¦