The Mozilla Foundation has published a fix for a “critical” JavaScript vulnerability in the Firefox browser and the SeaMonkey. This week the fix was released which targets Firefox versions 2.0.0.2 and 1.5.0.10, as well as SeaMonkey versions 1.1.1 and 1.0.8. An earlier fix for a JavaScript problem allowed scripts from Web content to execute arbitrary code, the Mozilla Foundation said.      

The vulnerability allowed uniform resource identifiers, or URIs, in image tags to be executed even if JavaScript was disabled
in the program preferences, Mozilla said.

Disabling JavaScript does not protect against the flaw, so the foundation recommended that users upgrade the applications to new versions. Mozilla’s Thunderbird e-mail client was not affected by the vulnerability

Popularity: 2%