New version of Firefox fixes nine security flaws

published 12 June 2009

Mozilla has released a new version of its Firefox browser, fixing a number of security vulnerabilities - of which four were critical.

The critical vulnerabilities fixed by Firefox version 3.0.11 could have led attackers to run code and install software with normal browser usage.

The critical flaws fixed included JavaScript chrome privilege escalation, arbitrary code execution using event listeners, and crashes with evidence of memory corruption. Here is a full list of the vulnerabilities patched.

The update also fixed several stability issues, problems with the internal database SQLite, and a situation where the bookmarks database could have become corrupt.

The update will be downloaded automatically, overwriting the existing installation of Firefox and requiring a restart.

This week has seen the most popular browsers in Internet Explorer and Google Chrome patched, while Apple's Safari browser has come out of beta.