Firefox update fixes security flaws - perezuncer1996

Several security vulnerabilities in Firefox 16 are organism addressed in an update of the browser software released by the Mozilla Foundation. This is the second clip in the last 2 weeks that the browser has had to be updated to address surety problems.

All the security issues are related to the "Location" physical object in the software. One of the flaws, when combined with some plug-ins, could make up made use of to perform cross-land site scripting attacks on users. Those attacks typically are used to taint Web applications at sure websites and bear on malicious code to unsuspecting visitors of those sites.

Another vulnerability involves the CheckURL procedure in the browser's code, which could atomic number 4 unvoluntary to go back a wrong esteem. Mozilla said this could be employed in a cross-site scripting attack, or be put-upon to execute whimsical code to a web browser add-on it interacts with the content on a paginate.

A third defect addressed past the update allowed the security housecoat on the Location object to make up bypassed by a hacker.

Mozilla also pushed out an update of its Thunderbird netmail client to address to fix similar flaws in that program. It explained in a blog along the update that the Position vulnerabilities addressed by the rising release would have less impact on Thunderbird because it uses those functions only through RSS feeds and extensions that load Web content.

When Firefox 16 was released happening October 9, it addressed vulnerabilities outlined in 14 security advisories, 11 of them "acute." Within 24 hours of that release, Mozilla halted downloads of the software because of security measures concerns. To address those concerns, Mozilla released version 16.0.1 of its browser. That release blocked the hole out that allowed malicious websites to read the browsing history of visitors to those sites.

Note: When you purchase something after clicking links in our articles, we may realise a small committal. Read our assort link policy for more details.

John Mello writes happening technology and cyber security for a come of online publications and is former managing editor of the Boston Business Journal and Boston Phoenix. Revealing: He also writes for Hewlett-Packad's marketing website TechBeacon.

Source: https://www.pcworld.com/article/455487/firefox-update-fixes-security-flaws.html

Posted by: perezuncer1996.blogspot.com