Firefox Update Knocks Out Security Flaws

Mozilla released the latest update to its Firefox browser yesterday, patching a handful of security vulnerabilities and improving the interaction between scripted commands and plug-ins. The latter addresses an interesting bug which affected certain add-ons such as the popular Adblock Plus. On the security side, several stability defects in the browser engine have been fixed. These defects resulted in crashes that showed evidence of memory corruption which, if exploited correctly, could allow for the execution of arbitrary code. Four other vulnerabilities were corrected in Firefox 3.0.6, including an issue with tab restoration which could lead to file stealing as well as a cross-site scripting flaw.

This is an important security update, so users should upgrade via their browser or through Firefox’s official download site as soon as possible.