Mozilla releases Firefox 16.0.1 to address multiple vulnerabilities

Mozilla releases Firefox 16.0.1 to address critical vulnerability that could allow a malicious site to potentially determine which websites users have visited and have access to the URL or URL parameters. In addition, Firefox 16.0.1 fixes two top crashing bugs in the browser engine used in Firefox and other Mozilla-based products. These bugs showed evidence of memory corruption under certain circumstances that can result in crashes and can potentially be exploited to execute arbitrary code

The first of these bugs, a FreeType issue, is a mobile only issue which happens on custom kernels like Cyanogenmod, not on standard Android installations. The second bug is a websockets crash affecting Firefox 16 but not Firefox ESR.

Firefox 16.0 contains a number of performance improvements and many new features. Firefox 16 makes developing for the Web faster and easier with a new Developer Command Line. This new tool provides easy keyboard control over Firefox Developer Tools and is intuitive, completing commands and parameters for you. More information about Firefox 16.0 is available at Firefox 16.0 Final.

Download Firefox 16.0.1:
The links in this section correspond to files available for this download. Download the files appropriate for you:
Firefox 16.0.1 running on Windows 8

What's new in Firefox 16.0.1
Firefox 16.0.1 has the following changes:
Fixed:
  • MFSA 2012-89 defaultValue security checks not applied. [Critical]
  • MFSA 2012-88 Miscellaneous memory safety hazards. (rv:16.0.1) [Critical]

Source:

No comments: