::Trend Micro Threat Resource Center::

05 February 2009

Mozilla shutters seven Firefox flaws

Mozilla released its latest update to its Firefox browser on Tuesday, closing seven security holes, including two critical issues, according to the company's release notes.

The critical flaws occur in the program's layout and Javascript engines, which can be used to crash the program and possibly run malicious code, the company said in an advisory. The flaw also affects Mozilla's SeaMonkey all-in-one Internet suite and the Thunderbird e-mail client, if Javascript is enabled, which is not the default setting.

Firefox users can download and apply the update, by choosing the "Check for Updates..." command in the file menu.

Read more here.