However, only one of the three vulns is critical. Mozilla’s advisories reveal that “some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.” This reduces the performance hit on Firefox’s user interface, according to Mozilla.Īll three of these vulnerabilities would allow hackers to inject malware onto machines running older versions of Firefox. Detailed elsewhere on the web site, the bugs are listed as three critical flaws in the browser’s Gecko rendering engine, the HTML parsers, and their implementations of Web Worker, the enhanced scripting functionality allowing site developers to shift JavaScript computations to a background thread. The official release notes for Firefox 3.0.18 say that the new version fixes issues found in previous versions of Firefox 3, including “several security issues”. Addressing vulnerabilities that have been already patched in Firefox 3.6, the new release includes all the changes delivered in Firefox 3.0.17 and is available for immediate download right here on Softpedia. Mozilla has issued an update for users of Firefox 3.0, the branch soon to be discontinued.
0 kommentar(er)
