SHARE

New Firefox, Mozilla Versions Fix Open Browser Holes

Written By

Published: May 12, 2005

Updated: Feb 2, 2021

1 minute read

eWeek content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

New versions of the Firefox and Mozilla browsers have been released that address three security problems, including one that was made public last week.

The first fix addresses the bug that was publicized recently, in which an attacker can execute code by using a javascript: URL as the IconURL property. Mozilla is partly vulnerable to this bug.

For insights on security coverage around the Web, check out eWEEK.com Security Center Editor Larry Seltzers Weblog.

The other two fixes (involving Wrapped” javascript: urls and “non-DOM property overrides”) also address bypasses of security checks involving javascript: URLs.

Security updates are getting to be a common occurrence with Firefox and Mozilla. This update is the fourth addressing 32 security holes in 2005.

As with all the other recent security fixes, the new versions are not patches but complete new versions that must be completely downloaded and installed through normal program installation means. Firefox 1.0.4 for Windows is a 4.7MB download.

Firefox for Windows users can obtain the update using the Tools-Options dialog. Click the Advanced button on the left and locate the Software Update section.

Check out eWEEK.coms for the latest security news, reviews and analysis.

Larry Seltzer

Larry Seltzer has been writing software for and English about computers ever since—,much to his own amazement— He was one of the authors of NPL and NPL-R, fourth-generation languages for microcomputers by the now-defunct DeskTop Software Corporation. (Larry is sad to find absolutely no hits on any of these +products on Google.) His work at Desktop Software included programming the UCSD p-System, a virtual machine-based operating system with portable binaries that pre-dated Java by more than 10 years.For several years, he wrote corporate software for Mathematica Policy Research (they're still in business!) and Chase Econometrics (not so lucky) before being forcibly thrown into the consulting market. He bummed around the Philadelphia consulting and contract-programming scenes for a year or two before taking a job at NSTL (National Software Testing Labs) developing product tests and managing contract testing for the computer industry, governments and publication.In 1991 Larry moved to Massachusetts to become Technical Director of PC Week Labs (now eWeek Labs). He moved within Ziff Davis to New York in 1994 to run testing at Windows Sources. In 1995, he became Technical Director for Internet product testing at PC Magazine and stayed there till 1998.Since then, he has been writing for numerous other publications, including Fortune Small Business, Windows 2000 Magazine (now Windows and .NET Magazine), ZDNet and Sam Whitmore's Media Survey.

New Firefox, Mozilla Versions Fix Open Browser Holes

Larry Seltzer

Company

Categories