
As Microsoft applauds the fact that Internet Explorer 7 is not affected by the direct animation overflow ActiveX vulnerability that impacted older builds of the browser, highlighting to company's commitment
for increased security, Mozilla releases Firefox version 1.5.0.7, patching a total of seven flaws spread among the browser and the Thunderbird client. SeaMonkey 1.0.5 and Network Security Service (NSS) 3.11.3 are also on Mozilla's list of patched products.
With the 1.5.0.7 release, Mozilla addressed the following issues: "Crashes with evidence of memory corruption," "Popup-blocker cross-site scripting (XSS)," "Frame spoofing using document.open()," "RSA Signature Forgery," "Concurrency-related vulnerability," "Auto-Update compromise through DNS and SSL spoofing" and "JavaScript Regular Expression Heap Corruption."
Four of the vulnerabilities have received a rank of critical, according to Mozilla's impact key, two were moderate and one was considered to have low impact.