By Mozilla released 10 patches for three versions of its Firefox browser on Tuesday, five of which are considered critical and could be used to remotely install malicious code. The U.S. Computer Emergency Readiness Team warned that the problems “could allow a remote attacker to execute arbitrary code, bypass intended access restrictions, cause a denial-of-service condition or obtain sensitive information.” The Mozilla products affected are Firefox 25, Firefox ESR 24.1, Firefox Extended Support Release (ESR) 17.0.10, Thunderbird 24.1, Thunderbird ESR 17.0.10, and Seamonkey 2.22. Among the flaws fixed were several memory safety bugs in the browser engine, which is also in Mozilla’s Thunderbird email client and Seamonkey, a suite of applications and web development tools. <more>
Menu
