Mozilla patches security flaws in Firefox update

 

Gallery

By Simon Aughton

Posted on 31 May 2007 at 13:35

Mozilla has patched a number of security vulnerabilities in the Firefox Web browser.

The update addresses five flaws related to XUL pop-up spoofing, XSS using addEventListener, path abuse in cookies, persistent auto-complete denial of service and crashes with evidence of memory corruption, all of which are detailed in the release notes.

Several unspecified issues relating to Windows Vista compatibility have also been addressed, save four which have been documented in the release notes with details of how to manually work round them.

The notes also list a number of outstanding issues with OS X and Linux support.

Firefox 2.0.0.4 is available from mozilla.com/firefox.