Firefox Updated to version 3.5.6 fixing 7 vulnerabilities
December 16, 2009
Today, Mozilla released an update for the Firefox browser: version 3.5.6. This is basically a security release as it plugs 7 recently reported vulnerabilities in Firefox (and in Seamonkey). Three os the vulnerabilities were rated as Critical. There were also several stability issues resolved with this release.
Fixed in Firefox 3.5.6
MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-67 Integer overflow, crash in libtheora video library
MFSA 2009-66 Memory safety fixes in liboggplay media library
MFSA 2009-65 Crashes with evidence of memory corruption (rv:1.9.1.6/ 1.9.0.16)
You can update Firefox right from your browser, using the Help menu > "Check for Updates" link. I found that while I was able to download the update I was unable to apply it, as I operate as an XP Pro Power User. To update via the browser I closed Firefox, then right-clicked on the desktop icon for it, then chose Run As, inputted my administrator credentials and opened Firefox as the Administrator. I was then able to perform the in-browser update. In past releases I was able to update Firefox as a Power User, so something has been changed in this release.
Alternately, you can download the latest version of Firefox from Mozilla's Firefox landing page, save it and run it with whatever permissions it demands. Since Firefox is installed into your Program Files directory, and creates accounts for all users, Windows demands administrator credentials or permissions to allow the installation.
If you are not yet a Firefox user you should try it. Use the link in the previous paragraph to download and install it. Leave the default option set to automatically check for updates. You will be given an option to import your cookies and Favorites into Firefox, both during installation and anytime afterward. Note, Favorites are called Bookmarks in Firefox and all other Mozilla based browsers. Only Internet Explorer and AOL's browsers refer to saved websites as Favorites.
If you like this article please share it.
The content on this blog may be reprinted provided you do not modify the content and that you give credit to Wizcrafts and provide a link back to the blog home page, or individual blog articles you wish to reprint. Commercial use, or derivative work requires written permission from the author.