Mozilla releases Firefox, Thunderbird, SeaMonkey updates

Posted on 10 Nov 2006 at 08:57

Mozilla has released security and stability updates for Firefox 1.5, Thunderbird and SeaMonkey.

The updates address three common security vulnerabilities: the ability to forge RSA digital signatures with a low exponent (typically 3); evidence of memory corruption that Mozilla believes could be exploited to run arbitrary code; and the possible modification of a Script object while it was executing, potentially leading to the execution of arbitrary JavaScript bytecode. On this third flaw, Mozilla notes that Thunderbird could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and Mozilla strongly discourages users from enabling it.

These vulnerabilities are not present in the final release version of Firefox 2.

The updates are available from mozilla.org.

Author: Simon Aughton

Get more reviews, tutorials and in-depth advice, every month with Computer Shopper.
Click here to try 3 issues for £1

< Previous News : General Next >

Be the first to comment on this article

You need to Login or Register to comment.