SillyDog701

[dmbtech]

Firefox 1.0.4 has been released, and it fixes the major firefox security vulnerbility (http://www.mozilla.org/products/firefox ... 1.0.4.html) http://www.mozilla.org/security/announc ... 05-42.html . This is an important download and fix, so please download it. Hasn't been posted on the mozillazine forums or slashdot yet. It hasn't been updated on all of the ftp servers yet, so download it from here:
Windows: http://download.mozilla.org/?product=fi ... lang=en-US
Linux: http://download.mozilla.org/?product=fi ... lang=en-US
Mac: http://download.mozilla.org/?product=fi ... lang=en-US

(Stickified by Andrew T.)
(unsticked by Antony - 21 May 2005)

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050511 Firefox/1.0+

[J-M]

SecuriFocus security company has now confirmed that Arbitrary Code Execution Vulnerability is fixed: http://www.securityfocus.com/bid/13544/solution/ .

not vulnerable: Mozilla Firefox 1.0.4

Secunia says the same too at http://secunia.com/advisories/15292/ :

Solution Status: Vendor Patch

Link to localized versions page is http://www.mozilla.org/products/firefox/all ;
at time of writing only en-US is available. Press release "Security Update to Firefox Now Available" is located at the MO's News section, see details at http://www.mozilla.org/news.html .

We can read the updated Release Notes too: http://www.mozilla.org/products/firefox ... 1.0.4.html .

Edit: added another security advisory link and some bold tags.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fi-FI; rv:1.7.7) Gecko/20050414 Firefox/1.0.3

[Alice]

As of this morning, Firefox 1.0.4 final is available for download from the link at http://www.mozilla.org (I'm downloading it right now). From the 1.0.4 release notes:

What's New 1.0.4

Firefox 1.0.4 is a security update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version.

Here's what's new in Firefox 1.0.4:

* Several security fixes
* Fix to DHTML errors encountered at some web sites. For web developers, learn more.

The Firefox 1.0.4 security fixes:
MFSA 2005-44 Privilege escalation via non-DOM property overrides
MFSA 2005-43"Wrapped" javascript: urls bypass security checks
MFSA 2005-42 Code execution via javascript: IconURL

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050510 Firefox/1.0.4 (ax)

[FrankoSport]

Greetings ...

Done the update at home, and I'm about to head off to work and update there.

OBSERVATION ... In the little Firefox "About" Box I see the words "Some trademark rights used under license by the Charlton Company".

QUESTION .. What is the Charlton Company, and what is their connection to Mozilla Firefox?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

[beanboy89]

OBSERVATION ... In the little Firefox "About" Box I see the words "Some trademark rights used under license by the Charlton Company".

QUESTION .. What is the Charlton Company, and what is their connection to Mozilla Firefox?

FrankoSport,

You're not the only one who has wondered what or who the 'Charlton Company' is. View the thread What is "The Charlton Company?" for more information on the Charlton Company.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b2) Gecko/20050509