Aqua-Soft ForumsThe Mozilla Foundation has released the latest version of its Firefox Web Browser - 1.0.7. This version fixes the buffer overflow vulnerability that could let attackers gain control of an affected PC, as well as the new "extremely critical" hole found in the Linux edition of Firefox.
The buffer overflow flaw was discovered earlier in the NormalizeIDN function, while handling specially crafted URLs embedded in HREF tags. Theoretically, a malicious hacker could haven taken "complete control of an affected system" by exploiting this error, which now stands fixed by Firefox 1.07.
Firefox 1.07 also fixes a new "extremely critical" hole reported by security notification firm Secunia, which had the potential to hit systems running Firefox on Linux and Unix.
Reportedly this new vulnerability is actually a shell script problem, rather than a Firefox problem per se.
In practice, the new flaw can be exploited by tricking users into clicking on a poisoned link in an e-mail message. Then, when the e-mail client calls Firefox to display the link, the commands will also run.
Mozilla says that this vulnerability was reported by security researcher Peter Zelezny. Several versions of Linux Firefox are believed to be at risk i.e. Firefox version 1.0.6 and Mozilla 1.7.7 included in Linux distributions, ranging from Red Hat's to TurboLinux's.
Firefox 1.0.7 for Windows, Mac OS and Linux is available for download from the Mozilla site, but in the English language only. Versions for other languages will be out shortly.
Download Firefox 1.0.7_______________________________________
I didn't know you were the creator of Firefox and should use the [release] tag. Next time, use a proper tag, ok?
/Post edited, thread re-tagged
Unbeliever
