September 15, 2006 12:54 PM PDT

Firefox update patches security holes

Mozilla has sent out an update to Firefox, designed to address seven security flaws in the open-source Web browser.

Firefox 1.5.0.7, released Thursday, tackles a problem that lets outsiders run code remotely and aims to improve the product's stability.

Of the seven vulnerabilities fixed, four are rated "critical" by Mozilla. The new browser version addresses the circumvention of security via an RSA signature forgery flaw, as well as cross-site scripting vulnerabilities. In addition, it patches a JavaScript regular expression heap corruption issue and a memory corruption issue that could lead to the execution of code.

While the update addressed four critical flaws, it was less extensive than one released in July that contained fixes for seven flaws.

The release of Firefox 1.5.0.7 comes alongside the online publication of exploits to attack Microsoft's Internet Explorer. The 5.01 and 6 versions of the Web browser, running on all current versions of the Windows operating system, are affected.

See more CNET content tagged:
patch management, Firefox, flaw, Mozilla Corp., Web browser

Add a Comment (Log in or register) 15 comments
So why hasn't FF alerted me?
by ejevo September 15, 2006 1:18 PM PDT
FF can be a great browser, but I keep finding glitches that drag it back down to the level of IE, albeit not nearly as bad from a security standpoint, but not such that it can crow about its features, either.

Why does it take days before FF alerts to the fact that it has an update available? I should be finding out about updates available from the update feature, not from reading about them in the press a day after they've been released.
Reply to this comment View all 4 replies
OMG!!!!!!!!!!!!!!!!!!
by Lindy01 September 15, 2006 2:16 PM PDT
Ditch FF and got to IE!!!!!!!!!!!!!!!! What shody, horrible open source JUNK!!!!!!!!!!!!!!!!!!

Stop the open source movement its run by Terror groups and they greatly contribute to global warming, and the third world starving!!!!!!!!!!!

Seriously...software is complicated and made by humans and will have bugs....whether its from MS or anyone else.

Compare the comments on this article to the other one today where IE had a new bug....it was a CNET, liberal, commie, MS Bash Fest!
Reply to this comment
Bookmarks bug
by sportav September 15, 2006 2:25 PM PDT
The bug on my XT box at work (Ugh) locks up the program when you simply hover over the bookmarks menu. Also, news videos on CNN and MSNBC do not run.
Reply to this comment
CNN videos don't even work for me in IE, never have
by mjm01010101 September 15, 2006 7:12 PM PDT
CNN videos don't even work for me in IE, never have

As for MSN, you must use IE for that.

Just go elsewhere for your videos, not like there isn't a plethora of sites that DO work.
Reply to this comment View all 2 replies
Share police stories and news
by lucifinil September 17, 2006 11:28 PM PDT
Share police stories and news

Check the news from police.vost.com

military friends, military networking military network, military
social, finding friends, blogs, blogging, group, forum, military community,
search people, message, military photo, military image, love, dating,
sex, make love, friends, gun, fire, tank, air, navy seals, troop, kill,
war. 14
Reply to this comment
Share police stories and news
by lucifinil September 17, 2006 11:52 PM PDT
Share police stories and news

Check the news from police.vost.com

military friends, military networking military network, military
social, finding friends, blogs, blogging, group, forum, military community,
search people, message, military photo, military image, love, dating,
sex, make love, friends, gun, fire, tank, air, navy seals, troop, kill,
war. 39
Reply to this comment
bulky, crashy, trashy...
by aSiriusTHoTH September 18, 2006 8:55 AM PDT
I don't know about anyone else but for me FF has started to become bulky, crashy, and trashy. I can open up 4 - 5 tabs and easily see FF using over 150MB of ram and even higher. It will slow my computer down and eventually crash. This is across a network of 30+ computers.

Is it really time to start using Opera on our network?????
Reply to this comment
moron
by aSiriusTHoTH September 18, 2006 9:00 AM PDT
Stick to the story and get off the liberal/commie crap. I tend to lean to the left a bit and I don't like IE. Jumping to the politics right away, is just stupid.. its about FireFox.. not any moronic conclusions you have... get over it!
Reply to this comment
When's Auto-Update WITHOUT USER INPUT coming?
by gefitz September 18, 2006 1:44 PM PDT
When's Firefox going to come with functionality to automatically update Firefox WITHOUT USER INPUT? Am I missing that, or is it really not possible?

I'd love to get Firefox onto my corporate desktops, but trusting users to apply updates when they are available is simply NOT an option...
Reply to this comment
Powered by Jive Software
advertisement

Latest tech news headlines

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement

Inside CNET News

Scroll Left Scroll Right
  • News - Business Tech

    Dell planning to ditch factories

    Dell's new CFO Brian Gladden has said that the company "more work to be done," to improve profitability and decrease costs. The Wall Street Journal is reporting that the company is planning to lower costs by selling off its factories.

  • Gallery

    Photos: Ron Paul's RNC alternative

    As the Republican convention took place just miles away, a crowd rallied for the former presidential candidate and his message of limited government, ensured civil liberties, lower taxes, and peace.

  • Negative Approach

    Online content and services via game consoles will generate $8 billion in revenue in 2013

    The revenue possibilities in gaming continue to grow, at least for the big console manufacturers.

  • Beyond Binary

    Microsoft begins big ad push

    Microsoft's multi-year push, estimated at $300 million, begins with a spot featuring Bill Gates and Jerry Seinfeld aired during Thursday's NFL game.

  • Video

    YouTube plays party politics

    During the presidential campaigning four years ago, YouTube didn't even exist. Now it's a tool candidates must master to get their message across. CNET's Kara Tsuboi stops by the YouTube upload booths at the Democratic and Republican conventions to find out why Google's video site has such a big presence in Denver and St. Paul, Minn.

  • News - Wireless

    Was EarthLink's failed citywide Wi-Fi a blessing in disguise?

    Wireless Philadelphia, the nonprofit charged with providing broadband bundles to low-income families in Philadelphia, may be better off in the long run without EarthLink.

  • Video

    Political party playlists

    We know the Democrats and Republicans are split over policy issues, but does their musical taste fall down party lines too? And what kind of gadgets did they bring to the conventions to listen to their music? CNET reporter Kara Tsuboi finds out.

  • News - Gaming and Culture

    Behind the prototyping of 'Spore'

    Many of the components of Will Wright's highly anticipated evolution game started out as small concept projects that are now available to the public.

  • News - Cutting Edge

    Execs predict next Google-like tech

    On eve of company's 10-year anniversary, researchers and business pundits speculate about what technologies might someday have as much impact as Google.

  • Gallery

    Photos: The brains behind Google Chrome

    Here's a look at some of the engineers and executives who took the stage at the company's headquarters as they unveiled the new browser.

  • The Cheapskate

    Record TV in style with a refurbished TiVo HD, $179.99 shipped

    TiVo is offering refurb HD units for cheap, though you'll still have to pay for the TiVo service.

  • News - Politics and Law

    McCain talks up oil drilling, green energy

    Republican presidential candidate says we need to drill new wells now, while supporting innovative transportation technologies and "the use of wind, tide, solar and natural gas."