Saturday, February 24, 2007

Firefox 2.0.0.2 Released

Firefox Magazine: Firefox 2.0.0.2 Released:
"New released have been announced today by Mozilla, Firefox 2.0.0.2. Including mainly several security issues fixes, in addition to an enhanced Windows Vista Support, a fix in german translation, and four new languages : Afrikaans, Belarusian, Georgian, and Kurdish. If you didn't get already the update message, you can download it directly from Mozilla website. Vulnerabilities fixed in this release :

* Embedded nulls in location.hostname confuse same-domain checks
* Mozilla Network Security Services (NSS) SSLv2 buffer overflow
* XSS and local file access by opening blocked popups
* Spoofing using custom cursor and CSS3 hotspot
* Information disclosure through cache collisions
* Improvements to help protect against Cross-Site Scripting attacks
* Crashes with evidence of memory corruption"

No comments: