Package firefox: Information

The Mozilla Firefox project is a redesign of Mozilla's browser component,
written using the XUL user interface language and designed to be
cross-platform.
- New bugfix version 2.0.0.18 built for M40
- Fixed:
  + MFSA 2008-58 Parsing error in E4X default namespace
  + MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals
  + MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin violation
  + MFSA 2008-55 Crash and remote code execution in nsFrameManager
  + MFSA 2008-54 Buffer overflow in http-index-format parser
  + MFSA 2008-53 XSS and JavaScript privilege escalation via session restore
  + MFSA 2008-52 Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18)
  + MFSA 2008-50 Crash and remote code execution via __proto__ tampering
  + MFSA 2008-49 Arbitrary code execution via Flash Player dynamic module unloading
  + MFSA 2008-48 Image stealing via canvas and HTTP redirect
  + MFSA 2008-47 Information stealing via local shortcut files
- New bugfix version 2.0.0.17 built for M40
- Fixed:
  + MFSA 2008-45 XBM image uninitialized memory reading
  + MFSA 2008-44 resource: traversal vulnerabilities
  + MFSA 2008-43 BOM characters stripped from JavaScript before execution
  + MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
  + MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
  + MFSA 2008-40 Forced mouse drag
  + MFSA 2008-39 Privilege escalation using feed preview page and XSS flaw
  + MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
  + MFSA 2008-37 UTF-8 URL stack buffer overflow
- New bugfix version 2.0.0.16
- Fixed:
 + MFSA 2008-35 Command-line URLs launch multiple tabs when Firefox not running
 + MFSA 2008-34 Remote code execution by overflowing CSS reference counter

Package firefox: Information

Last changed