updated 06:25 pm EDT, Thu May 31, 2007
Firefox 220.127.116.11 update
Mozilla today released Firefox 2.0.04, an update to the popular open-source browser. The free browser brings several security updates, improved Vista support, and new language localizations. The update addresses critical memory corruption issues that the developers believe could be exploited to run arbitrary code as well as a "high" impact security flaw that could allow a malicious user to inject a script into another site in violation of the browser's same-origin policy. The script, Mozilla said, could be used to access or modify private or valuable information from that other site. Other flaws addressed in the update include XUL Popup Spoofin, XSS using addEventListener, Path Abuse in Cookies, and Persistent Autocomplete Denial of Service. New versions are also available for Afrikaans (af) and Belarusian (be). The browser is a free download for all users.