Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Mozilla Patches 12 Firefox Flaws

Mozilla Corp. on Thursday patched its Firefox browser against 12 vulnerabilities, 5 of them labeled "critical" by the Mountain View, Calif. company.

Firefox 1.5.0.4 is the fourth security update to the 1.5 edition of the browser since it released last November. The number of holes plugged in 1.5.0.4, however, is only half that of April's mega-patch, when 24 total, 11 of them "critical," were fixed.

Danish vulnerability tracker Secunia tagged the update with a "highly critical" rating, it's second highest ranking.

Some of the flaws could be used by attackers to generate buffer overflows, which can lead to further system access, including planting malicious code on the computer, Secunia noted. Others would let attackers run malicious JavaScript without the user's permission.

A list of the bugs patched by 1.5.0.4 can be found on the Mozilla Foundation's Web site.

  • 1