Mozilla's browser is affected by several flaws

Dec 20, 2006 07:30 GMT  ·  By

Mozilla Firefox is probably the most popular browser on the Internet, representing the most powerful rival of Microsoft's product, Internet Explorer. As you may know, the giant added tab navigation to IE7, an element that was introduced in the online market by Mozilla's Firefox.

One of the main advantages of Firefox was its improved security that protected the browser from multiple attacks in comparison with Internet Explorer that was the most affected browser. Because the Internet is not safe anymore, multiple vulnerabilities in Firefox were reported today that can allow an attacker to view private information or take the control of a vulnerable system.

Security company Secunia posted a security advisory on the official page, rating the flaws as "highly critical" and saying that no more than 10 vulnerabilities were already identified in Mozilla Firefox.

Mozilla confirmed all the vulnerabilities and issued advisories for every flaw, saying the solution is to update to the latest version of the browser.

"Various errors in the layout engine and JavaScript engine can be exploited to cause memory corruption and some may potentially allow execution of arbitrary code; An error when reducing the CPU's floating point precision, which may happen on Windows when loading a plugin creating a Direct3D device, may cause the "js_dtoa()" function to not exit and instead cause a memory corruption; The "Feed Preview" feature of Firefox 2.0 may leak feed-browsing habits to websites when retrieving the icons of installed web-based feed viewers," are only three of the vulnerabilities posted by Secunia.

Mozilla said in their advisories that the affected programs are Firefox, Thunderbird and SeaMonkey and the solution is to update to the latest version of the applications: Firefox 2.0.0.1, Firefox 1.5.0.9, Thunderbird 1.5.0.9 and SeaMonkey 1.0.7.