Mozilla Firefox 1.0.5 has been released. It fixes
- Code execution through shared function objects
- XHTML node spoofing
- Javascript prompt origin spoofing
- Standalone applications can run arbitrary code through the browser
- Same origin violation: frame calling top.focus()
- The return of frame-injection spoofing
- Possibly exploitable crash in InstallVersion.compareTo()
- Script injection from Firefox sidebar panel using data:
- Same-origin violation with InstallTrigger callback
- Code execution via "Set as Wallpaper"
- XBL scripts ran even when Javascript disabled
- Content-generated event vulnerabilities
Hat tip to Dwight Silverman
No comments:
Post a Comment