Firefox, Opera updated after bugs found

Powered by SC Magazine
 

Microsoft isn’t the only company updating its web browser against new security threats.

Mozilla released the latest version of Firefox, version 1.5.0.2, this week, saying the update addresses a number of security and stability issues.

Mozilla notified users of 19 flaws in Firefox this week, 11 of which were called critical by the company.

The flaws allowed possible security bypasses, cross-site scripting, address spoofing, exposure of sensitive information, denial of service (DoS) attacks and system access, according to vulnerability monitoring firm Secunia.

Mozilla, in a statement posted Thursday on its website, urged users to upgrade for security reasons.

"Mozilla Corporation is also strongly recommending that Firefox 1.0 users upgrade to this latest release of Firefox 1.5 in order to take advantage of significant security and stability improvements," the company said. "Firefox 1.5 includes an automated update mechanism that ensures users are always up to date with the very latest updates."

Mozilla last issued vulnerability alerts in February over multiple highly critical flaws.

Meanwhile, Opera also released version 8.54 of its web browser this week. The open-source software was updated to address a buffer-overflow issue in handling cascading style sheets, according to the SANS Institute's Internet Storm Center website.

Copyright © SC Magazine, US edition


 
 
 
Top Stories
Coalition's NBN cost-benefit study finds in favour of MTM
FTTP costs too much, would take too long.
 
Who'd have picked a BlackBerry for the Internet of Things?
[Blog] BlackBerry has a more secure future in the physical world.
 
Will Nutanix be outflanked before reaching IPO?
VMware muscles in on storage startup in hyper-converged infrastructure.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  69%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  10%
TOTAL VOTES: 640

Vote