Mozilla issues fix for Firefox, SeaMonkey flaw

The Mozilla Foundation has issued a critical fix designed to address vulnerabilities in a recent security update for the Firefox browser and SeaMonkey application suite, CNET reports.

The security flaws were discovered in Firefox 1.5.0.9 and 2.0.0.1, as well as in SeaMonkey 1.0.7.

The initial fix, issued in mid-December, was designed to address vulnerabilities in Firefox, SeaMonkey and Mozilla’s Thunderbird e-mail client. But that particular fix introduced a flaw that could allow JavaScript code from Web content to be exploited, then lead to the execution of arbitrary code.

Mozilla advises Firefox users to upgrade to version 1.5.0.10 and 2.0.0.2, and SeaMonkey users to update to version 1.1.1 and 1.0.8.

Disabling JavaScript will not protect users from the vulnerabilities, Mozilla warned.

Mozilla’s Thunderbird e-mail client is not affected by the vulnerability.