Firefox 22 delivers 14 security updates
Posted on 26 June 2013.
Mozilla released Firefox 22, which includes 14 security updates: four are critical, six high, three moderate and one low.


Fixed in this version:
  • MFSA 2013-62 Inaccessible updater can lead to local privilege escalation
  • MFSA 2013-61 Homograph domain spoofing in .com, .net and .name
  • MFSA 2013-60 getUserMedia permission dialog incorrectly displays location
  • MFSA 2013-59 XrayWrappers can be bypassed to run user defined methods in a privileged context
  • MFSA 2013-58 X-Frame-Options ignored when using server push with multi-part responses
  • MFSA 2013-57 Sandbox restrictions not applied to nested frame elements
  • MFSA 2013-56 PreserveWrapper has inconsistent behavior
  • MFSA 2013-55 SVG filters can lead to information disclosure
  • MFSA 2013-54 Data in the body of XHR HEAD requests leads to CSRF attacks
  • MFSA 2013-53 Execution of unmapped memory through onreadystatechange event
  • MFSA 2013-52 Arbitrary code execution within Profiler
  • MFSA 2013-51 Privileged content access and execution via XBL
  • MFSA 2013-50 Memory corruption found using Address Sanitizer
  • MFSA 2013-49 Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)





Spotlight

The synergy of hackers and tools at the Black Hat Arsenal

Posted on 27 August 2014.  |  Tucked away from the glamour of the vendor booths and the large presentation rooms filled with rockstar sessions, was the Arsenal - a place where developers were able to present their security tools and grow their community.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Sep 1st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //