Close on the heels of Google’s security update for its Chrome browser, Mozilla has recently released one more, probably the last, update for Firefox 3.6 – the Firefox 3.6.14 – to address 10 vulnerabilities in the browser, including eight flaws that have received a ‘critical’ rating on the basis of the security risks associated with them.
These ‘critical’ vulnerabilities can be exploited by hackers to run attack code and install software sans the requirement of the users to either click on devious malware links or accept downloads of .exe files anywhere.
With the CanSecWest security conference kicking off next week, the Firefox 3.6.14 update – which was initially scheduled to release in mid-February, but was held up due to some stubborn bugs – chiefly patches critical issues in the browser’s JavaScript and JPEG-handling components, along with including some fixes for memory errors that can potentially trigger a crash.
In addition, the new Firefox update also patches a couple of lower-risk security flaws – one of which has been labelled as a ‘high’ risk; while the other is deemed a ‘moderate’ risk.
Overall, Mozilla has listed 41 patches for all versions of Firefox 3.6; with 11 patches in Firefox 3.6.13 - nine of which have been listed as ‘critical’ – as well as a whole bunch of patches for earlier Firefox 3.6 versions. Furthermore, the company has also released an updated version of its desktop email client Thunderbird 3.1.












