Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct spoofing and cross-site scripting attacks and potentially to compromise a user’s system.
1) Various errors in the browser engine can be exploited to cause memory corruption and potentially to execute arbitrary code.
3) An error in the “addEventListener” and “setTimeout” methods can be exploited to inject script into another site’s context, circumventing the browser’s same-origin policy.
4) An error in the cross-domain handling can be exploited to inject arbitrary HTML and script code in a sub-frame of another web site.
This is related to vulnerability #5 in:SA21906
5) An unspecified error in the handling of elements outside of documents allows an attacker to call an event handler and execute arbitrary code with chrome privileges.
6) An unspecified error in the handling of “XPCNativeWrapper” can lead to execution of user-supplied code.
Secunia has constructed the Secunia Software Inspector, which you can use to check if your system is vulnerable:http://secunia.com/software_inspector/
Update to version 18.104.22.168-Download Firefox – Free 22.214.171.124 for Windows, English (5.7MB)
Get free from Multiple vulnerabilities by secunia advisory, yup a better solution….