Mozilla has pushed out a new version of Firefox that fixes a number of security bugs, including a high-profile bug involving launching Firefox from Internet Explorer.

Firefox version 2.0.0.5 also fixes a number of memory corruption and privilege escalation flaws, as explained in Mozilla's release notes here.

The release - available in Mac, Windows and Linux flavours - will be automatically pushed out to users within the next two days. Users still running running Firefox 1.5.0.x, which is no longer supported, are urged to upgrade to the Firefox 2 series.

In other security bug-related news, independent security researcher Michal Zalewski has unearthed a vulnerability in Internet Explorer, which might be exploited by a malicious website to spoof the address bar. The unpatched bug allows con-men to create more convincing phishing and revolves around flaws in the way IE7 implements the "document.open()" method of opening new browser windows.

An even more severe client-side risk comes from a pair of unpatched flaws in the Trillian multi-protocol IM client. Users are urged to disable the "aim://" URI handler in Trillian as a workaround, pending the delivery of security updates. ®

Related stories

• Microsoft to search browsers for JavaScript compatibility (1 November 2007)
• Bad hair day for alternative browser users (19 October 2007)
• Firefox leak could divulge sensitive info (13 August 2007)
• Black Hat Making open-source browsing safe for the masses (2 August 2007)
• Firefox update fixes bug brace (31 July 2007)
• Mozilla confirms own URL handling bug (25 July 2007)
• Facebook buys Firefox startup (23 July 2007)
• A serious browser vulnerability, but whose? (11 July 2007)
• Flaws galore in IE and Firefox (5 June 2007)
• Mozilla quashes Firefox JavaScript peril (1 June 2007)
• Mozilla patches faulty patch (7 March 2007)
• Firefox hands out cookies from strangers (15 February 2007)
• Updated IE and Firefox cough up hard drive contents (13 February 2007)
• Review Firefox 2.0: happier browsing, but secure? (30 January 2007)
• IE 'unsafe' for 284 days last year (5 January 2007)
• Firefox update guards against critical flaws (21 December 2006)
• Mozilla flaws more joke than jeopardy (5 October 2006)
• Just how buggy is Firefox? (8 September 2006)
• 'Firefox flaw wrecked my relationship' (23 March 2006)