Mozilla Issues Firefox Updates

Mozilla has issued updates, all rated as “critical” for both the Firefox 2 and 3 browsers.

Firefox 3 receives three patches, the first for Mac OSX, to stop a potential attack by a malformed .gif file. The second fixes a flaw in the uniform resource identifier (URI) that could let external apps access the computer. The final Firefox fix addresses the way the browser handles CSS code. Without the fix, it’s possible for a crafted CSS object to crash the application then allow remote code execution.

Two pair of updates for Firefox 2 address the URI and CSS issues.

With support for Firefox 2 ending later this year, Mozilla has recommended users upgrade to Firefox 3. The updates are available from Mozilla, US-CERT, and Sans.