| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / may, 2006 / Firefox 1.5.0.3 corrects vulnerability  

Firefox 1.5.0.3 corrects vulnerability

Firefox 1.5.0.3 corrects vulnerability

Madrid, May 4, 2006 - A new version of Firefox (v.1.5.0.3) has been released to correct a vulnerability in this popular browser. Mozilla advises all users to install the update to prevent possible attacks.

The corrected vulnerability was caused by an error processing certain JavaScript calls. The problem lay in the js320.dll and xpcom_core.dll due to the fact that the browser did not correctly handle the code included in the iframe.contentWindow.focus() function.

An attacker could create a web page which when viewed could cause a denial of service. In addition, this vulnerability could potentially be used to cause an exploitable buffer overflow, allowing an attacker to execute arbitrary code and remotely compromise the system.

More details about the corrected vulnerability and the new version of Firefox 1.5.0.3 for Windows, Linux and Mac OS X are available at: http://www.mozilla.com/firefox/releases/1.5.0.3.html



Oxygen3 24h-365d
by Panda Software

2006-05-05 12:16

Back