Mozilla patches critical Firefox bugs
Summary
Topics
On Wednesday, Mozilla issued patches for versions 3.5.8 and 3.0.18 of the browser, sending out fixes for the latter even though it had said it would stop supporting Firefox 3.0 in January.
In its security bulletin, the company said the vulnerabilities had previously been resolved in Firefox 3.6, which was launched on 21 January.
The five flaws addressed by Mozilla included three the company rated 'critical'. These three flaws involve an error in handling out-of-memory conditions; stability errors in the Gecko rendering engine; and a bug in the way Mozilla's implementation of web workers handles posted messages, Mozilla said. Web workers are used to carry out scripting tasks in a way that reduces the processing load on the user interface.
Talkback Most Recent of 7 Talkback(s)
-
There is apparently one more
http://www.theregister.co.uk/2010/02/18/firefox_zero_day_report/
If you're using Windows, you may help youself by confining FireFox to low integrity level:
http://www.wilderssecurity.com/showpost.php?p=1044344&postcount=19
Use AppArmor on Linux:
http://talkback.zdnet.com/5208-12691-0.html?forumID=1&threadID=71785&messageID=1387286
Earthling219th Feb 2010 -
I wonder why Mozilla hasn't implemented LIL.
Vista has been out for over three years and they have yet to implement this very valuable feature the OS offers.
ye19th Feb 2010 -
Ask them! I'm sure there's a Wiki or something.
Unless you're more interested in repeatedly asking the question than finding out the answer, of course.
Zogg19th Feb 2010 -
RE: Mozilla patches critical Firefox bugs
Isn't that M$ NT5 version Hasta la Vista ?
for 7
xmeshman21st Feb 2010 -
RE: Mozilla patches critical Firefox bugs
it used to work, but now since i've run seamonkey, there are lots of things in firefox 3.6 that no longer work that had something to do with flash like stuff. however, it still works with gniarmls, which means i dont have to use windows anymore for my business!
gallagher123rd Feb 2010 -
RE: Mozilla patches critical Firefox bugs
Firefox no longer opens for me, since installing 3.6.... It was sluggish under 3.5x, and I felt that updating would solve the unknown issues. So now I am toying with changing browsers (definitely NOT IE) - maybe the first shot will be Opera - it worked super under OS2 Warp. The only thing that bugs me is the loss of the add-ons.
Additionally, T-Bird allows me to download my mail but refuses to allow me to initiate a new mail or forward one. It continuously opens a box requesting my password. For some reason it won't accept it from my current ISP; nor will it accept the password from my previous provider (for some strange reason it linked to my previous ISP even though I have purchased 4 new machines since changing providers). I have to send mail via google/yahoo or other means.
If anyone has any work-arounds for either problem, I'd appreciate some help - I haven't tried the CNet Community yet; maybe I should. Anyone with any answers please reach me at: das.Ghost.Rider@gmail.com
Thanks in advance.....
Les_L23rd Feb 2010 -
RE: Mozilla patches critical Firefox bugs
I can't even open Firefox now. I'm using Mac OS X 10.6, and
I'm browsing with Safari for now. I'd like to get back to using
a safe Firefox. Any suggestions?
paulinefiddle25th Feb 2010
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox




