Mozilla has announced the release of Firefox 3.6.2, the latest stable version of its popular web browser for Mac OS X, Windows and Linux. On the Mac side, Firefox 3.6.2 fixes a bunch of issues found in previous versions of Firefox 3.6, all of which are detailed below. As usual, Mac users are encouraged to download and install the latest stable version of Mozilla Firefox.
According to the release notes posted by Mozilla for version 3.6.2, the company’s development team has been able to fix a critical security issue that could potentially allow remote code execution. Listed in the Mozilla Foundation Security Advisory 2010-08 as “WOFF heap corruption due to integer overflow,” the bug was reportedly found by security researcher Evgeny Legerov of Intevydis, who reported to Mozilla that, “The WOFF decoder contains an integer overflow in a font decompression routine.”
According to the security expert, “This flaw could result in too small a memory buffer being allocated to store a downloadable font. An attacker could use this vulnerability to crash a victim's browser and execute arbitrary code on his/her system.”
As noted above, the bug has been addressed in Firefox 3.6.2, making the update imperative for all users of the 3.6 branch of the software. In addition to this vulnerability, Mozilla has fixed several additional security issues, as well as some stability issues, according to the changelog. “Please see the complete list of changes in this version. You may also be interested in the Firefox 3.6 release notes for a list of changes in the previous version,” Mozilla detailed on the firefox/3.6.2/releasenotes/ page.
Mac users require Mac OS X 10.4 (Tiger) or later to run this version of Firefox. Hardware requirements include a minimum PowerPC G3, G4, or G5 processor, while Intel processors are also supported. In addition to these specs, at least 128 MB of RAM are required (recommended: 256 MB of RAM or more) and some 200 MB of storage space. Using the link below, Mac users can download one of the several Firefox versions available, including 3.7 Alpha 3, 3.6.2, 3.5.8, 3.0.18, and even 2.0.0.20.
No comments:
Post a Comment