Mozilla’s Firefox browser has been updated to fix 13 security vulnerabilities, five rated critical. The open-source group on June 1 shipped Firefox 1.5.0.4, a security and stability release to correct flaws that could cause security bypass, cross-site scripting, system access and HTTP response-smuggling attacks.

Security alerts aggregator Secunia rates the update as “highly critical” because of the risk of remote code execution exploitation. According to Mozilla’s advisory, the most serious flaws occur because of errors in the browser engine that could be exploited to cause a memory corruption. This may allow arbitrary code execution attacks.

View: Full Story
Source: eWeek via MSFN