Mozilla late Tuesday pushed out a security update to its Firefox browser to repair seven flaws deemed "critical," meaning they could be exploited to launch attack code to install malicious software on victims' machines.In total, Firefox version 3.0.2 corrects 12 vulnerabilities.
The critical bugs involve a memory corruption issue in the browser engine, according to a Firefox
advisory, and a privilege escalation problem in
XPCNativeWrappers, according to a second
advisory.
The latest version also rectifies four vulnerabilities rated "moderate" risk and one rated "low" risk.
The new updates also are covered in Firefox 2.0.0.17. Mozilla has said it will end support for Firefox 2 in December.
Tuesday's fixes are also part of email client Thunderbird 2.0.0.17 and internet suite SeaMonkey 1.1.12.
See original article on scmagazineus.com