The Mozilla Foundation has released an update to their Firefox web browser. The update addresses various security and stability issues, including a fix for a buffer overflow vulnerability.
Changes include:
• Fix for a potential buffer overflow vulnerability when loading a hostname with all soft-hyphens
• Fix to prevent URLs passed from external programs from being parsed by the shell (Linux only)
• Fix to prevent a crash when loading a Proxy Auto-Config (PAC) script that uses an "eval" statement
• Fix to restore InstallTrigger.getVersion() for Extension authors
Naturally we would urge all users of Firefox to upgrade to 1.0.7 as soon as possible, either through the built-in upgrade feature, or from the Mozilla web site.
|
|