Firefox 3.0.7 Addresses Security Issues

The latest commercial edition of Firefox, version 3.0.7, is said to address three "critical" security issues. But a close look at the list itself shows that a myriad of similar issues were grouped together as one, making the total list of high-level issues as high as six.

Four issues with layout engine crashes collectively constituted a single security issue, and the concern here is the possibility -- though no proof of concept yet exists -- that such crashes could lead to exploitable memory corruptions. Two of the four memory crash issues involve both series 2 and 3 of the browser, and some only occur when certain add-ons are installed.

In one case, a layout crash was reported by Firefox contributor Jesse Ruderman that was best recreated with the installation of Quitter, a quick-exit add-on written...by Jesse Ruderman.