Mozilla Releases Firefox Updates
Mozilla has announced the immediate availability of Firefox 3.6.4 and Firefox 3.5.10. These updates address multiple vulnerabilities that can allow an attacker to run code and install software with no user interaction beyond normal browsing.
Firefox 3.6.4 adresses four critical and two moderate vulnerabilities in these areas, one of which can be used to inject or steal keystrokes. Firefox 3.5.10 fixes six critical and two moderate vulnearbilities, one of which includes the keystroke issue in 3.6.