Version 2.0.0.13 staves off the possibility of spoofing, cross-site scripting and malicious code installation that could result from exploitation.
The most serious flaw appears to involve a JavaScript privilege escalation problem, according to the SANS Internet Storm Center. This could force the browser to run malicious scripts that could lead to cross-site scripting or arbitrary code execution.
Storm Center handler Raul Siles wrote on the group's blog that users should consider running the open-source NoScript extension, offered by InformAction, to protect against attacks.
The other critical bug that was patched relates to a memory corruption error.
Mozilla also released version 1.1.9 of internet suite SeaMonkey and version 2.0.0.13 of email client Thunderbird.
See original article on scmagazineus.com
Mozilla releases latest Firefox browser
Mozilla on Wednesday released an update to resolve six vulnerabilities, two rated as critical, in its Firefox web browser.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
iTnews State of Security Breakfast comes to Sydney
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
What’s Next?
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
