Firefox & Thunderbird Security Updates

Mozilla issued security updates for Firefox and Thunderbird. These updates fix critical security vulnerabilities. It is recommended byMozilla that these updates should be installed as soon as possible.

If you have turned off the update notification, you can manually "check for updates" from the Help menu.

Firefox 2.0.0.1
Firefox 1.5.0.9
Thunderbird 1.5.0.9

The following known vulnerabilities were fixed in Firefox 2.0.0.1:

• MFSA 2006-76 XSS using outer window's Function object

• MFSA 2006-75 RSS Feed-preview referrer leak

• MFSA 2006-73 Mozilla SVG Processing Remote Code Execution

• MFSA 2006-72 XSS by setting img.src to javascript: URI

• MFSA 2006-71 LiveConnect crash finalizing JS objects

• MFSA 2006-70 Privilege escallation using watch point

• MFSA 2006-69 CSS cursor image buffer overflow (Windows only)

• MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1)

For other versions of Firefox see the Known Vulnerabilities page.