Mozilla has issued updates, all rated as “critical” for both the Firefox 2 and 3 browsers.
Firefox 3 receives three patches, the first for Mac OSX, to stop a potential attack by a malformed .gif file. The second fixes a flaw in the uniform resource identifier (URI) that could let external apps access the computer. The final Firefox fix addresses the way the browser handles CSS code. Without the fix, it’s possible for a crafted CSS object to crash the application then allow remote code execution.
Two pair of updates for Firefox 2 address the URI and CSS issues.
