mfsa

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Firefox 2 dirty dozen: Critical vulnerabilities patched

Mozilla has shipped a high-priority update for Firefox 2, warning that there are at least five serious vulnerabilities that could lead to code execution attacks. With Firefox 2.0.0.15, Mozilla fixes at least 12 documented vulnerabilities -- five rated critical --  that could put users at risk...

Tags: Mozilla Firefox 3.0, Mozilla Firefox, Critical Vulnerability, XSS, Mozilla Firefox 2.0, MFSA, Web Browsers, Internet, Ryan Naraine

Blog posts 2008-07-02

Mozilla delivers patches for Firefox; Plugs flat file vulnerability

Mozilla on Friday delivered its Firefox 2.0.0.12 update including patches that fix a Web forgery flaw, browsing history and forward navigation stealing and the directory traversal via chrome, which has been the most visible vulnerability of late. According to the Firefox security advisory, Mozilla filed the following...

Tags: Mozilla Firefox, Vulnerability, Patch Management, Web Browser, Mozilla Corp., MFSA, Web Browsers, Security, Internet, Larry Dignan

Blog posts 2008-02-07

Mozilla plugs 10 more Firefox holes

Mozilla has shipped the eighth refresh of its flagship Firefox 2 browser to fix at least 10 vulnerabilities affecting Windows and Linux users. The latest Firefox 2.0.0.8 update includes another two patches rated "critical" because of the risk of code execution. The first high-priority...

Tags: Mozilla Firefox, Vulnerability, Web Browser, Mozilla Corp., MFSA, Web Browsers, Security, Internet, Ryan Naraine

Blog posts 2007-10-19

Mozilla zaps Firefox security bugs

Mozilla has rolled out a major security update to fix a total of seven vulnerabilities in its flagship Firefox browser.The batch of patches apply to users of Firefox 1.5.0.10 and Firefox 2.0.0.2 (Windows, Mac, and Linux) and are available as a free downloat at getfirefox.com."Due to the security fixes, we...

Tags: Patch Watch, Browsers, Vulnerability research, Responsible disclosure, Spam and Phishing, Exploit code, Open source, Mozilla, Google, Firefox

Blog posts 2007-02-23

Additional Resources

Protocol handlers cause Mozilla Firefox 3 remote command execution vulnerabilities

Update 07/16/2008: Apparently I neglected to mention that this has been patched already.  Reading over it again and a heads up from a reader pointed out the error to me.  As always, great job by Window Snyder and the Mozilla Security Team for getting this patched quickly. ...

Tags: Mozilla Firefox 3.0, Mozilla Firefox, URI, Vulnerability, Mozilla Corp., Attack, Web Browsers, Security, Internet, Nathan McFeters

Blog posts 2008-07-16

Mozilla delivers Firefox update

Mozilla one Wednesday patched one flaw in Firefox in an update (2.0.0.14). The fix--a crash in JavaScript garbage collector--was deemed critical by Mozilla. According to Mozilla, the problem was created by a previous fix. Here's the description: Fixes for security problems in the JavaScript engine described...

Tags: Mozilla Firefox, JavaScript, Garbage Collection, Mozilla Corp., Scripting Languages, Software/Web Development, Web Development, Larry Dignan

Blog posts 2008-04-16

Mozilla updates Firefox; Fixes multiple vulnerabilities

Mozilla has patched 10 vulnerabilities in Firefox 2.0 with update 2.0.0.13. In an update early Wednesday Firefox addressed the following: MFSA 2008-19  XUL popup spoofing variant (cross-tab popups) MFSA 2008-18 Java socket connection to any local port via LiveConnect MFSA 2008-17 Privacy issue with...

Tags: Mozilla Firefox, Vulnerability, Mozilla Corp., Web Browsers, Programming Languages, Java, Security, Internet, Software Development, Software/Web Development, Larry Dignan

Blog posts 2008-03-26

3 critical flaws fixed in Firefox 2.0.0.5

An automatic update to Mozilla Firefox 2.0.0.5 last night closed 8 security holes, 3 of which were listed as "critical", according to the release notes. Fixes include:Critical MFSA 2007-23 Remote code execution by launching Firefox from Internet Explorer MFSA 2007-21 Privilege escalation using an...

Tags: Web Browsers, Scripting, General

Blog posts 2007-07-19

Mozilla patches 'critical' Firefox memory corruption crashes

Mozilla has released a new version of its flagship Firefox browser with fixes for five security vulnerabilities, one carrying a "critical" rating.The most serious issue addressed in today's Firefox 2.0.0.4 update pertains to browser crashes with evidence of memory corruption. This fix (MFSA 2007-12) rolls up several bug fixes...

Tags: Apple, Botnets, Browsers, Data theft, Digital rights management, Exploit code, Firefox, Google, Hackers, McAfee, Metasploit, Mozilla, Open source, Passwords, Patch Watch, Pen testing, Responsible disclosure, Spam and Phishing, Spyware and Adware, Viruses and Worms, Vulnerability research, Zero-day attacks

Blog posts 2007-05-30

Mozilla issues security updates

Mozilla issues security updatesMozilla issues security updatesAlready done did updated last night. First kid on my block to do so. It did give a warning about the new java 6.0 not being compatible.Mozilla issues security updatesI assume this is only for windoze, thank God for Linux!FireFox Security UpdatesAfter...

Tags: Web browsers, Java console, Mozilla Corp., Mozilla Firefox, issues security update, Java

Discussion threads 2006-12-20

Firefox update squashes security bugs

Firefox update squashes security bugsFirefox update squashes security bugsJust updated Firefox to 1.05. I'm the first kid on my block with the update and by the looks of it, on zdnet too :pNice titleIf microsoft fixes a bug... is "Another bug fixed for IE".... but if Firefox fixes a...

Tags: Web browsers, Mozilla Firefox, rep, Firefox Update, security, security bug, Microsoft Corp.

Discussion threads 2005-07-12