Mozilla on Wednesday released an update to its popular Firefox Web browser that fixes a dozen vulnerabilities, seven of which it deems "critical".
The most serious of the flaws could be exploited by cyberattackers to commandeer a vulnerable PC, according to Mozilla. The company, which oversees Firefox development, has published security advisories for each of the flaws repaired by the Firefox update.
The flaws are fixed in Firefox 1.5.0.5, which Mozilla has started pushing out to Firefox users via the update feature in the open source Web browser. In addition to the security fixes, the browser update includes stability improvements, as well as changes for the Frisian version for some users in the Netherlands, Mozilla said.
"Firefox 1.5.0.5 is a security update that is part of our ongoing program to provide a safe Internet experience for our customers," Mozilla said on its Web site. "We recommend that all users upgrade to this latest version."
Security monitoring company Secunia rates the update as "highly critical", one notch below its most serious ranking.
Mozilla also released updates for its SeaMonkey suite of applications to address security issues that apply to those programs.
While some of the security flaws may affect the earlier 1.0 versions of Firefox, Mozilla is not providing updates for those releases. Its version 1.0.8 was the last refresh for the 1.0.x line of Firefox. All users are advised to upgrade to the 1.5.0.5 version. The 1.0.8 version came out in April.
Developers are working on Firefox 2, the next major version of the Web browser. Mozilla earlier this month shipped the first beta of the new browser, which includes such features as a phishing shield to protect against information thieving online.
Microsoft, meanwhile, is putting the final touches on Internet Explorer 7, a reinforced version of its Web browser. Designed, in part, in response to competition from Firefox, IE 7 is due out in the fourth quarter of this year.
Talkback
I am assuming the flaws affected only windoze users? Haven't seen a list of the flaws but, given the structure of windoze am assuming Linux is un-affected.
So sick of the word 'experience', I am !
Aug 3, 2006. Firefox 1.5.06 already out. The article is old news. FireFox 2 expected in fall 2006. They're moving ahead fast. Fixes within days, rather then ones a month. Significant (functional) upgrades every so many months, rather then every so many years.
IE7? Plenty of administrators are busy blocking the automatic installation of IE7. You might want to ask them how to do the same trick at home.
Enough said.