Fixes a total of seven critical vulnerabilities

Jul 27, 2006 09:51 GMT  ·  By

On July 27, 2006, Mozilla has announced that it has released Firefox 1.5.0.5. The latest variant of the IE's rival browser is not connected in any way to the latest version of Firefox 2.0 that is currently in beta phase. Mozilla has stated that Firefox 1.5.0.5 is in actuality a security update for the already existing versions of the browser and it is urging Firefox users to download and install the patch. With the update, Mozilla is trying to keep the high standard of security that has become synonymous with the brand, but also improves on the browser's stability and adds changes for Frisian locale. Firefox 1.5.0.5 will address a total of no less than 12 security vulnerabilities, out of which seven were ranked as critical, two have a high degree impact and the remaining three are considered moderate threats.

This security update comes in the wake of a Firefox Trojan threat dubbed FireSpy or FormSpy that compromises the machine presenting itself as a Mozilla browser extension, after being dropped by the Dloadr-AKL Trojan horse.

"It's critical that users of Firefox's web browser keep updated to protect against security vulnerabilities," said Graham Cluley, senior technology consultant for Sophos. "It makes sense for all computer users to remain alert about the latest security flaws, and ensure they are running the latest patched version of their chosen internet browser. It has been much more common for hackers to target users of Microsoft Internet Explorer than Firefox. Even though we do not believe that the FireSpy Trojan horse poses a significant threat, it is still a timely warning that all computer users - regardless of whose software they use - need to be careful about what code they run on their PCs, and ensure they are properly protected."