Patch/Configuration Management, Vulnerability Management

Firefox updates for eight critical flaws

Share

Mozilla has released an update to its Firefox browser to patch 14 vulnerabilities, eight of which are defined as "critical" in severity, meaning users' machines can be infected with malware simply by visiting a website — a tactic known as a drive-by download. Firefox version 3.6.7 and 3.5.11, released Tuesday, also corrects two flaws rated "high" and four bugs deemed "moderate." — DK

Related

Critical Apache OFBiz flaw patched

Such a vulnerability evades fixes issued for previous OFBiz bugs, tracked as CVE-2024-38856, CVE-2024-36104, and CVE-2024-32113, all of which have resulted from a fragmentation issue within the controller-view map that could allow unauthenticated remote code or SQL query execution, according to Rapid7 security researchers.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.