Firefox 1.5.0.4 officially released

Mozilla have officially annouced the release of Firefox 1.5.0.4. Mozilla Software Update will download the full Firefox installer and not do an incremental download.

Firefox Version 1.5.0.4 has more bug fixes, security updates and better memory management to prevent browser crashes but no new features.

• Privilege escalation using addSelectionListener


• Web site XSS using BOM on UTF-8 pages


• File stealing by changing input type (variant)


• "View Image" local resource linking (Windows)


• Buffer overflow in crypto.signText()


• Remote compromise via content-defined setter on object prototypes


• PLUGINSPAGE privileged JavaScript execution 2


• Privilege escalation through XUL persist


• XSS viewing javascript: frames or images from context menu


• HTTP response smuggling


• Fixes for crashes with potential memory corruption


• EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)

Downlaod Firefox here. Firefox 1.5.0.4 Release Notes here. I hope this version doesn't crash as often as 1.5.0.3.

Bagikan Artikel ini