TOOLS: Firefox v1.0.5

Posted on by

Firefox v1.0.5New version 1.0.5 of Firefox released!

What’s new in this release?

  • Improvements to stability.

  • Several security fixes.

  • Code execution through shared function objects

  • XHTML node spoofing

  • Javascript prompt origin spoofing

  • Standalone applications can run arbitrary code through the browser

  • Same origin violation: frame calling top.focus()

  • The return of frame-injection spoofing

  • Possibly exploitable crash in InstallVersion.compareTo()

  • Script injection from Firefox sidebar panel using data:

  • Same-origin violation with InstallTrigger callback

  • Code execution via “Set as Wallpaper”

  • XBL scripts ran even when Javascript disabled

  • Content-generated event vulnerabilities

Leave a Reply