Firefox latest release v9 fix the critical vulnerabilities in earlier versions. Also the update version improves JavaScript performance by up to 30 per cent.
The vulnerability details:
The vulnerabilities also exist in previous versions of the SeaMonkey "all-in-one Internet suite" and are addressed in the Seamonkey 2.6 update.
The Thunderbird email client is vulnerable, but only the first vulnerability mentioned is rated as critical. Version 9.0 of Thunderbird will fix the issues but has not yet been released.
The vulnerability details:
- MFSA 2011-58 Crash scaling <video> to extreme sizes
- MFSA 2011-57 Crash when plugin removes itself on Mac OS X
- MFSA 2011-56 Key detection without JavaScript via SVG animation
- MFSA 2011-55 nsSVGValue out-of-bounds access
- MFSA 2011-54 Potentially exploitable crash in the YARR regular expression library
- MFSA 2011-53 Miscellaneous memory safety hazards (rv:9.0)
Solution:
Upgrade to Firefox 9.0 or download the latest version here.The vulnerabilities also exist in previous versions of the SeaMonkey "all-in-one Internet suite" and are addressed in the Seamonkey 2.6 update.
The Thunderbird email client is vulnerable, but only the first vulnerability mentioned is rated as critical. Version 9.0 of Thunderbird will fix the issues but has not yet been released.