Firefox 3.0.9 targets 12 security vulnerabilities

• Tweet

• Tweet

Firefox 3.0.9 targets 12 security vulnerabilities

Mozilla released an update to Firefox 3 on Tuesday that patches 12 security vulnerabilities, four of which it rated as critical.

Firefox 3.0.9, the Web browser’s third update this year, fixes two critical vulnerabilities in the Firefox browser engine and two in its JavaScript engine, according to a security advisory posted Tuesday:

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

The release comes as Mozilla prepares to release the fourth beta of Firefox 3.5–the next version of the open-source browser. Mozilla had originally planned to release its new “Shiretoko” version of Firefox in early 2009. But after releasing Firefox 3.1 beta 3 last month, the organization behind the browser said a fourth beta is planned–and with the new version number 3.5.

Expected changes in Firefox 3.5 include faster execution of Web-based JavaScript programs, a private browsing mode, native support for the JSON (JavaScript Object Notation) technology for exchanging data between servers and browsers, and built-in audio and video abilities for bypassing Flash or other multimedia technologies.

In March, security testing company Secunia reported that Mozilla had more vulnerabilities in its Web browser last year than Internet Explorer, Safari, and Opera combined, but that Mozilla dealt with those flaws quicker than Microsoft.

Meanwhile, Firefox continues to chip away at Internet Explorer’s market dominance. Mozilla now has 22.05 percent of the global browser market share, compared with IE’s 66.82 percent, a drop of more than 7 percentage points in a year, according to figures from Web metrics company Net Applications.

Updates for Windows, Mac OS X, and Linux are available at the Mozilla site (downloads in all languages are available here). Firefox 3 users will receive an update notification within 48 hours, or they can download the update manually by selecting “Check for Updates” from the Help menu.

April 22, 2009 12:05 AM PDT 

Site :http://news.cnet.com

Related posts:

1. Ubuntu Security Notice
2. Firefox: “Could not find compatible GRE”