| Mozilla.org offers Firefox, Mozilla exploit fix |
May 12, 2005
 [Updated 5:00pm PDT] -- Mozilla.org has released updates that it claims eliminate the vulnerabilities discovered in Firefox 1.0.3 and the Mozilla suite earlier this week. Firefox 1.0.4 and Mozilla 1.7.8 downloads are now available for Linux, Mac OS, and Windows users.
The vulnerabilities, deemed "critical" by Mozilla.org, allowed attackers to gain access to stored cookies, data, and execute arbitary code. Mozilla.org issued a security advisory urging Mozilla Firefox 1.0.3 users to clear the list of sites given permission to install software and to disable javascript until a more permanent solution was available.
Mozilla suite users were believed to be less vulnerable to the exploit, and were advised to disable javascript.
Both Firefox 1.0.4 and Mozilla 1.7.8 are available for immediate download.
[Note: This article was updated to reflect the release of Mozilla 1.7.8 and Mozilla Firefox 1.0.4. At the original time of writing, the only fix available was Mozilla Firefox 1.0.4 release candidate.]
Related Stories:
(Click here for further information)
|
|
|
|
|
|
|
|
