The above mentioned patches were issued ahead of hacking contest Pwn2Own, which will pit hackers against popular web browsers. The targeted browsers include Microsoft’s IE8, Google’s Chrome 9, Mozilla’s Firefox3.6 and Apple’s Safari 5. The participants will also target Windows 7-based Dell Venue Pro, iOS-based iPhone 4, BlackBerry OS 6-based Torch 9800 and Android-based Nexus S smartphones. “This new breed of apps could leverage Web technologies to reach the whole range of competing platforms with a single application which can be distributed via a range of competing app stores,” he wrote. “By ‘installing’ a Web application the user can pre-approve access to local hardware like offline storage, accelerated graphics and geolocation to allow the app to make the most of the hardware it’s running on and the user can keep a local repository of all the applications they use.”
Security
The award-winning Firefox Web browser has security, speed and new features that will change the way you use the Web. Don’t settle for anything less. Mozilla Firefox project (formerly Firebird, which was formerly Phoenix) is a redesign of Mozilla’s browser component, written using the XUL user interface language and designed to be cross-platform. It is small, fast and easy to use, and offers many advantages over other web browsers, such as the tabbed browsing and the ability to block pop-up windows. Firefox has the most ways to customize your online experience specifically for the way you use the web. There are more than 6,000 Add-ons (little extras that augment Firefox to meet your unique needs) just waiting out there to help you do more, have more fun and be more creative online. Firefox keeps your personal info personal and your online interests away from the bad guys. Simply put, your security is our top priority.
Redirect
Firefox 3.6.14 also plugs a potential cross-site request forgery (CSRF) risk that could have come from an HTTP 307 redirect. The 307 is a temporary redirect code that websites and servers can use to steer users to a different URL. The CSRF risk stems from a flaw in how browser plugins are notified about the redirect. Mozilla noted in its advisory that when plugin-initiated requests receive a 307 redirect response, the plugin is not properly notified.
