Firefox 1.5.0.2 wurde veröffentlicht. Neben Verbesserungen in den Bereichen Sicherheit, Geschwindigkeit und Stabilität werden mit dieser Version erstmals Intel-basierte Macs nativ unterstützt. [...]

Here's what's new in Firefox 1.5.0.2:

• Universal Binary support for Mac OS X which provides native support for Macintosh with Intel Core processors. Firefox supports the enhancements to performance introduced by the new MacIntel chipsets.
  
• Improvements to product stability.
  
• Several security fixes:
  
  MFSA 2006-29 Spoofing with translucent windows
  MFSA 2006-28 Security check of js_ValueToFunctionObject() can be circumvented
  MFSA 2006-25 Privilege escalation through Print Preview
  MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest
  MFSA 2006-23 File stealing by changing input type
  MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability
  MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2)

What's New in Firefox 1.5.0.3

Firefox 1.5.0.3 is a security update that is part of our ongoing program to provide a safe Internet experience for our customers. We recommend that all users upgrade to this latest version.

• Security fix for denial of service vulnerability.

Release Date: May 2, 2006

--------------------------------------------------------------

Mozilla Foundation Security Advisory 2006-30
Title: Deleted object reference when designMode="on"
Impact: Critical
Date: May 2, 2006
Reporter: Martijn Wargers, Nick Mott, splices
Affects: Firefox 1.5

Fixed in: Firefox 1.5.0.3

Description
Martijn Wargers and Nick Mott each described crashes that were discovered to ultimately stem from the same root cause: attempting to use a deleted controller context when designMode was turned on. This generally results in crashing the browser, but in theory references to deleted objects can be abused to run malicious code.

"splices" reported the same crash at the fan site MozillaZine and on Bugtraq, incorrectly describing it as a buffer overflow.

Older clients, including Firefox 1.0.x and the Mozilla Suite 1.7.x, are not affected.

Workaround
Temporarily disable JavaScript until you can upgrade to a fixed version.

References
https://bugzilla.mozilla.org/show_bug.cgi?id=334515