Firefox Multiple Vulns - update available

FYI…

- http://secunia.com/advisories/18700/
Release Date: 2006-02-02
Critical: Highly critical
Impact: Security Bypass, Cross Site Scripting, Exposure of system information, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Mozilla Firefox 0.x, Mozilla Firefox 1.x …
Solution:
Update to version 1.5.0.1 - http://www.mozilla.com/firefox/ …"

More…

What's new in Firefox 1.5.0.1
- http://www.squarefree.com/burningedge/releases/1.5.0.1.html

- http://www.mozilla.org/projects/security/k…es.html#Firefox

FYI…

Update Firefox to 1.5.0.1, the exploit is out
- http://isc.sans.org/diary.php?storyid=1102
Last Updated: 2006-02-07 21:57:14 UTC
"Exploit code for the recently announced Mozilla Firefox 1.5 QueryInterface() Remote Code Execution has been released as a part of the metasploit framework. Get yours today, firefox update to 1.5.0.1 that is (No links to exploits here, sorry)…"