Mozilla has released FireFox 2.0.0.15 which fixes 5 critical ,4 High ,2 Moderate and 1 Low vulnerabilities.

Here’s list of what’s been fixed in this update.

MFSA 2008-33 Crash and remote code execution in block reflow
MFSA 2008-32 Remote site run as local file via Windows URL shortcut
MFSA 2008-31 Peer-trusted certs can use alt names to spoof
MFSA 2008-30 File location URL in directory listings not escaped properly
MFSA 2008-29 Faulty .properties file results in uninitialized memory being used
MFSA 2008-28 Arbitrary socket connections with Java LiveConnect on Mac OS X
MFSA 2008-27 Arbitrary file upload via originalTarget and DOM Range
MFSA 2008-25 Arbitrary code execution in mozIJSSubScriptLoader.loadSubScript()
MFSA 2008-24 Chrome script loading from fastload file
MFSA 2008-23 Signed JAR tampering
MFSA 2008-22 XSS through JavaScript same-origin violation
MFSA 2008-21 Crashes with evidence of memory corruption (rv:1.8.1.15)

There’s been a new flaw found in Internet Explorer that focuses on IE’s inline frames, and affects Microsoft’s Internet Explorer 6, 7, and 8 beta 1, the security flaw could subject users who visit a malicious Web site or open a malicious e-mail message to arbitrary code.

“iframes,” or inline frames, often are used for serving ads, which typically come from a different domain than content that appears on the same Web page.

U.S. CERT describes it as,

“Microsoft Internet Explorer fails to properly restrict access to a document’s frames, which may allow an attacker to modify the contents of frames in a different domain.”

Source — Secunia

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Daylight Saving Time (DST) is the system of advancing clocks so as to produce an additional period of daylight in the evening.Typically clocks are adjusted forward by one hour in the spring and are set back in fall.Until the year 2007, DST began at 2 am on the first Sunday of April and ended at 2 am on the last Sunday of October in most of the United States and Canada.From 2007, DST begins on the Second Sunday of March (03/11/07) and will end on The First Sunday of November 11/04/07.

As many applications depend on the system clock for example say Microsoft’s Outlook,calender,scheduling softwares…etc may not show the correct time.The Microsoft products affected by DST 2007 changes can be checked for here.
Microsoft has released a utility called the “tzmove” to address this problem it can be downloaded from their website.

Download Page for tzmove.