Mozilla Firefox 62.0.3 Released with Security Fixes

Mozilla has recently released a new version of Firefox browser that comes to address vulnerabilities in the application, while also bringing other improvements to Windows and macOS systems.

Firefox 62.0.3 isn’t a major release, but given that it resolves security flaws in the browser, it should be installed by all users as soon as possible.

According to Mozilla, there are two JavaScript vulnerabilities in the browser (described in CVE-2018-12386 and CVE-2018-12387), and they have already been confirmed in Firefox 62.0.3 and Firefox ESR 60.2.2.

CVE-2018-12386 is a type confusion in JavaScript and it was disclosed via Beyond Security’s SecuriTeam Secure Disclosure program.

“A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered,” Mozill... (read more)

from Softpedia News / Global https://ift.tt/2xXe7xJ