Firefox and Chrome security patches released

Google and Mozilla have posted security updates for their respective Chrome and Firefox web browsers.

The Firefox 3.6.8 update addresses a single vulnerability in the browser's plug-in parameter array stemming from an earlier fix to the same component.

Mozilla classifies the vulnerability as 'critical', warning that a successful exploitation could allow remote code execution.

The Chrome 5.0.375.125 update, meanwhile, covers five vulnerabilities, three rated 'high' risk, one rated 'medium' and one rated 'low'.

The high risk flaws include two memory corruption vulnerabilities and an " issue with large canvases". The other two address a problem with hostname truncation, and a vulnerability which could allow for disclosure of memory contents.

Google also released workarounds for two vulnerabilities in external components, helping to protect from flaws in the Windows kernel and GNU glibc components.

The US Computer Emergency Response Team recommends that users and administrators install both security updates immediately.