Update for FireFox and Thunderbird now available

An update for both Firefox and Thunderbird has been released by
Mozilla. Version 1.5.0.4 is now available, according to the release
notes, the list below are the supposed fixed
known-vulnerabilities.

For Firefox

  • MFSA 2006-43 Privilege escalation using
    addSelectionListener
  • MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
  • MFSA 2006-41 File stealing by changing input type
    (variant)
  • MFSA 2006-39 “View Image” local resource linking (Windows)
  • MFSA 2006-38 Buffer overflow in crypto.signText()
  • MFSA 2006-37 Remote compromise via content-defined setter on
    object prototypes
  • MFSA 2006-36 PLUGINSPAGE privileged JavaScript execution 2
  • MFSA 2006-35 Privilege escalation through XUL persist
  • MFSA 2006-34 XSS viewing javascript: frames or images from
    context menu
  • MFSA 2006-33 HTTP response smuggling
  • MFSA 2006-32 Fixes for crashes with potential memory
    corruption
  • MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig,
    Greasemonkey)

For Thunderbird

  • MFSA 2006-42 Web site XSS using BOM on UTF-8 pages
  • MFSA 2006-40 Double-free on malformed VCard
  • MFSA 2006-38 Buffer overflow in crypto.signText()
  • MFSA 2006-37 Remote compromise via content-defined setter on
    object prototypes
  • MFSA 2006-35 Privilege escalation through XUL persist
  • MFSA 2006-33 HTTP response smuggling
  • MFSA 2006-32 Fixes for crashes with potential memory
    corruption
  • MFSA 2006-31 EvalInSandbox escape (Proxy Autoconfig,
    Greasemonkey

So update those firefox and thunderbird softwares now…