Daboweb | Seguridad y ayuda informática |

Ha sido publicado Firefox 1.0.1, el cuál corrige severas vulnerabilidades en este navegador, además de agregar algunas mejoras.



Los usuarios deben desinstalar las versiones anteriores, respaldar o
borrar los perfiles de usuario, y recién entonces instalar la versión
1.0.1. Esto es así, debido a que algunos de los cambios requieren una
instalación sobre una configuración limpia para poder asegurar su
correcto funcionamiento.



Firefox 1.0.1 corrige las siguientes vulnerabilidades:


* MFSA 2005-29


Internationalized Domain Name (IDN) homograph spoofing

http://www.mozilla.org/security/announce/mfsa2005-29.html

* MFSA 2005-28


Unsafe /tmp/plugtmp directory exploitable to erase user’s files

http://www.mozilla.org/security/announce/mfsa2005-28.html


* MFSA 2005-27


Plugins can be used to load privileged content

http://www.mozilla.org/security/announce/mfsa2005-27.html


* MFSA 2005-26


Cross-site scripting by dropping javascript: link on tab

http://www.mozilla.org/security/announce/mfsa2005-26.html

* MFSA 2005-25


Image drag and drop executable spoofing

http://www.mozilla.org/security/announce/mfsa2005-25.htm


* MFSA 2005-24


HTTP auth prompt tab spoofing

http://www.mozilla.org/security/announce/mfsa2005-24.html

* MFSA 2005-23


Download dialog source spoofing

http://www.mozilla.org/security/announce/mfsa2005-23.html

* MFSA 2005-22


Download dialog spoofing using Content-Disposition header

http://www.mozilla.org/security/announce/mfsa2005-22.html


* MFSA 2005-21


Overwrite arbitrary files downloading .lnk twice

http://www.mozilla.org/security/announce/mfsa2005-21.html

* MFSA 2005-20


XSLT can include stylesheets from arbitrary hosts

http://www.mozilla.org/security/announce/mfsa2005-20.html

* MFSA 2005-19


Autocomplete data leak

http://www.mozilla.org/security/announce/mfsa2005-19.html


* MFSA 2005-18


Memory overwrite in string library

http://www.mozilla.org/security/announce/mfsa2005-18.html


* MFSA 2005-17


Install source spoofing with user:pass@host

http://www.mozilla.org/security/announce/mfsa2005-17.html

* MFSA 2005-16


Spoofing download and security dialogs with overlapping windows

http://www.mozilla.org/security/announce/mfsa2005-16.html


* MFSA 2005-15


Heap overflow possible in UTF8 to Unicode conversion

http://www.mozilla.org/security/announce/mfsa2005-15.html


* MFSA 2005-14


SSL «secure site» indicator spoofing

http://www.mozilla.org/security/announce/mfsa2005-14.html

* MFSA 2005-13


Window Injection Spoofing

http://www.mozilla.org/security/announce/mfsa2005-13.html




Descarga de Firefox 1.0.1 en español:

http://207.200.85.49/pub/mozilla.org/firefox/releases/1.0.1/win32/es-AR/