Firefox and Xulrunner: vulnerabilities

Users of Firefox and Xulrunner please be advised of various vulnerabilities that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

USN-997-1: [USN-997-1] Firefox and Xulrunner vulnerabilities
Details follow:

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov, Josh Soref, Gary

Kwong, Martijn Wargers, Siddharth Agarwal and Michal Zalewski discovered

various flaws in the browser engine. An attacker could exploit this to

crash the browser or possibly run arbitrary code as the user invoking the

program. (CVE-2010-3175, CVE-2010-3176)

Alexander Miller, Sergey Glazunov, and others discovered several flaws in

the JavaScript engine. An attacker could exploit this to crash the browser

or possibly run arbitrary code as the user invoking the program.

(CVE-2010-3179, CVE-2010-3180, CVE-2010-3183)
Read more at http://www.criticalwatch.com
 

Advertisements