Firefox 24 addresses 19 bugs with 17 patches

Share this article:
Mozilla plugs nine vulnerabilities ranked "critical" in its web browser.
Mozilla plugs nine vulnerabilities ranked "critical" in its web browser.

Mozilla's latest web browser, Firefox 24, was released this week patching a slew of critical bugs in the product.

Introduced on Tuesday, Firefox 24 plugs 19 vulnerabilities, including 9 "critical" flaws that undermine browser security.

According to a Mozilla security advisory, two of the company's critical Firefox patches rectify use-after-free issues that could lead to a potentially exploitable browser crash, the company said.

Mozilla also addressed two critical memory corruption bugs that could be exploited by an attacker, as well as several memory safety flaws that could allow a saboteur to run malicious code in users' browsers.

“Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products,” the advisory for patch 2013-76 said. “Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.”

Of the 17 patches implemented with Firefox 24, seven addressed critical vulnerabilities, meaning an attacker could run malicious code or install software of their choosing, and require no user interaction beyond “normal browsing” to carry out the exploit, the advisory said.

Share this article:

Sign up to our newsletters

More in News

Firefox 31 plugs critical memory safety bugs

In total, Firefox 31 brings 11 patches for several flaws affecting the web browser.

Android/Simplocker adds tricks, including ransom message in English

Android/Simplocker ransomware now encrypts archive files, asks to be installed as a Device Administrator, and delivers an English-language ransom message.

Wall Street Journal website vulnerable to SQL injection, gets hacked

The Wall Street Journal confirmed on Tuesday that an outside party exploited a vulnerability and hacked into its new graphics systems.