internet apps/networking
11/27/2007, 11:20pm, EST
Tuesday, November 27th
Firefox 2.0.0.10 update tightens security
Mozilla today released Firefox 2.0.0.10, introducing three security fixes. The update prevents the race condition from being exploited when setting the "window.location" property, which can generate a fake HTTP Referer header and be used as a conduit for cross-site request forgery attacks. Other unspecified errors could be exploited to cause memory corruption, and allow for remote execution of malicious code. There have been no feature additions or interface enhancements with the latest release, but with the upcoming v3.0 release of Firefox, the existing version will most likely only see security and stability enhancements.
Apple issued security fixes with its recent updates for Tiger, Leopard, and Safari for Windows. The Leopard update fixed several issues with the firewall, while the Tiger update fixes AFP Kerberos authentication. Safari 3.0.4b fixes several issues related to malicious remote code execution.
Filed under: security, software
Other story tags: Firefox, browser, mozilla
, 
, 3
, 
, 
, 
, 
, 
, 
Top
subscribe to comments
for this article
I wish they had an option just to update the damn program without bugging me about it.
But there should be a way around the prompting (and exactly who, while browsing, actually wants to be told you've downloaded a new version and disrupt your work for the wonderful new security features?).
Type about:config in the address bar and hit return. Then, type app.update.silent in the search bar and hit return. This is probably set to false. Change it to true and it might actually work.
Sure, the point-and-clickers out there would say it'd be nice to have a stupid check-mark on the preference pane, but, come on, this is so much simpler and easier. No worrying about help items. No cluttered interfaces. All the options you could ever want....