Firefox: 8 New Vulnerabilities

The Mozilla Foundation published 8 security advisories for the Firefox browser, one of which is rated 'critical' and 4 of which are rated 'moderate'. The critically-rated advisory (MFSA 2006-05) allows a remote attacker to inject XML that launches when Firefox is started. Thunderbird is also impacted if Javascript is enabled. By default, Javascript is not enabled in Thunderbird. Mozilla has released Firefox version 1.5.0.1 which patches the eight security vulnerabilities and fixed several other known bugs. For details and the upgrade, see:

• Security flaws fixed in v1.5.0.1
  
• Complete list of bug fixes in v1.5.0.1
  
• Update to Firefox v1.5.0.1