gaqpe.blogg.se

MFSA 2013-104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2) MFSA 2013-105 Application Installation doorhanger persists on navigation

MFSA 2013-106 Character encoding cross-origin XSS attack MFSA 2013-107 Sandbox restrictions not applied to nested object elements MFSA 2013-108 Use-after-free in event listeners MFSA 2013-109 Use-after-free during Table Editing

MFSA 2013-110 Potential overflow in JavaScript binary search algorithms MFSA 2013-111 Segmentation violation when replacing ordered list elements MFSA 2013-112 Linux clipboard information disclosure though selection paste MFSA 2013-113 Trust settings for built-in roots ignored during EV certificate validation MFSA 2013-114 Use-after-free in synthetic mouse movement MFSA 2013-115 GetElementIC typed array stubs can be generated outside observed typesets MFSA 2013-117 Mis-issued ANSSI/DCSSI certificate Mozilla defines critical as a “vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.” Here are the high-level summaries of them all with links to Mozilla’s specific advisories. Of the 14 security advisories Mozilla has released that address the latest Firefox version, five of them are rated as critical. Often touted as a “more secure” alternative to Internet Explorer, the latest version of Firefox has its own share of vulnerabilities, and Mozilla just released updates to resolve fourteen issues. While customers have gotten into a rhythm with Microsoft’s Patch Tuesday cycles, sometimes that can lead to oversights when patches are released by other vendors.