didier beck weblog

Wednesday, July 13, 2005

TOOLS: Firefox v1.0.5 

Firefox v1.0.5New version 1.0.5 of Firefox released!

What's new in this release?
  • Improvements to stability.

  • Several security fixes.

    • Code execution through shared function objects

    • XHTML node spoofing

    • Javascript prompt origin spoofing

    • Standalone applications can run arbitrary code through the browser

    • Same origin violation: frame calling top.focus()

    • The return of frame-injection spoofing

    • Possibly exploitable crash in InstallVersion.compareTo()

    • Script injection from Firefox sidebar panel using data:

    • Same-origin violation with InstallTrigger callback

    • Code execution via "Set as Wallpaper"

    • XBL scripts ran even when Javascript disabled

    • Content-generated event vulnerabilities