Saturday, March 28th 2009
Mozilla Firefox Updated to 3.0.8
Mozilla today released an important security update to Firefox. With sub-version 3.0.8, The browser has been patched for two critical security vulnerabilities, which are all that make it to this release.
The first vulnerability, titled "Arbitrary code execution via XUL tree element" could allow attackers to compromise a box by using a browser crash to run arbitrary code. The second one titled "XSL Transformation vulnerability" is where attackers get to use browser crashes caused by XSL stylesheets during XSL transformation, to run arbitrary code. For more information, refer to the Security Advisories page for Firefox. Existing Firefox versions will be updated to version 3.0.8 automatically by default. Firefox 3.0.8 can be downloaded from the Mozilla Website.
The first vulnerability, titled "Arbitrary code execution via XUL tree element" could allow attackers to compromise a box by using a browser crash to run arbitrary code. The second one titled "XSL Transformation vulnerability" is where attackers get to use browser crashes caused by XSL stylesheets during XSL transformation, to run arbitrary code. For more information, refer to the Security Advisories page for Firefox. Existing Firefox versions will be updated to version 3.0.8 automatically by default. Firefox 3.0.8 can be downloaded from the Mozilla Website.
33 Comments on Mozilla Firefox Updated to 3.0.8
If it was as simple as you say there'd be a lot of browsers with zero security holes... hmm, i cant find one.
3.0.7 and now 3.0.8 looks like good news , no more funny issues . ;)
It started crashing at 3.0.5 , i do not know if was Java , that it dislike it , or other cause .
What I do know is, that it runs good now 100% stable.
Just wondering how plausible is to us that we first get introduced with somekind alien bugs that weren't there in previous major V2. And then we're on the road to updates. I personally can't believe that V3 introduced clean all cookies bug that is still there w/o clean cookies on close tickled in the options. Well, at least ff gets faster but unfortunately lacks some of it's original style w/o even they try to make some virtual same 'old school appearance' onatopp it's new engine.