[Ben]

Firefox 1.5.0.4 und Thunderbird 1.5.0.4 zum Download verfügbar

Kurz: Mozilla Firefox 1.5.0.4 ist ein Sicherheitsupdate, welches folgende Sicherheits"löcher" stopft.

Fixed in Firefox 1.5.0.4
MFSA 2006-43 Privilege escalation using addSelectionListener
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-41 File stealing by changing input type (variant)
MFSA 2006-39 "View Image" local resource linking (Windows)
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-34 XSS viewing javascript: frames or images from context menu
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)

Quelle: http://www.mozilla.org/projects/secu...firefox1.5.0.4


Offizielle release notes:
http://www.mozilla.com/firefox/releases/1.5.0.4.html

Download:
http://www.getfirefox.com/


Mozilla Thunderbird 1.5.0.4 bietet ab sofort mehr Support für Mac OS X und schließt einige bekannte Sicherheits"löcher".

Fixed in Thunderbird 1.5.0.4
MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
MFSA 2006-40 Double-free on malformed VCard
MFSA 2006-38 Buffer overflow in crypto.signText()
MFSA 2006-37 Remote compromise via content-defined setter on object prototypes
MFSA 2006-35 Privilege escalation through XUL persist
MFSA 2006-33 HTTP response smuggling
MFSA 2006-32 Fixes for crashes with potential memory corruption
MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig, Greasemonkey)

Quelle: http://www.mozilla.org/projects/secu...derbird1.5.0.4

Offizielle release notes:
http://www.mozilla.com/thunderbird/r...s/1.5.0.4.html

Download:
http://www.mozilla.com/thunderbird/r....html#download