Multimedia File Viewing and Clickable Links are available for Registered Members only!!  You need to or

~~~
1) A security issue is caused due to a design error when handling input to file form fields, which can potentially be exploited to trick a user into uploading arbitrary files.

This is related to #3 in:
SA28758

2) An error within the handling of custom comments in image properties can be exploited to execute arbitrary script code in the wrong security context when comments of a malicious image are displayed.

3) An error in the handling of attribute values when importing XML into a document can be exploited to bypass filters and conduct cross-site scripting attacks if these values are used as document content.

The vulnerabilities are reported in versions prior to 9.26.

~~

For a more permanent fix: Mozilla Firefox & Noscript. And remember to report to Interpol as a pervert - sex offender (opera user). ;p

Multimedia File Viewing and Clickable Links are available for Registered Members only!!  You need to or

If you like your bank or wow account update your browser.

~~~

Security

   * Fixed a startup crash that could allow execution of arbitrary code
   * Sites can no longer change framed content on other sites: see our advisory
   * Fixed an issue that could allow cross-site scripting, as reported by Chris Weber of Casaba Security: details will be disclosed at a later date
   * Custom shortcuts no longer pass the wrong parameters to applications, as reported by Michael A. Puls II: see our advisory
   * Prevented insecure pages from showing incorrect security information, as reported by Lars Kleinschmidt: see our advisory
   * Feed links can no longer link to local files: see our advisory
   * Feed subscription can no longer cause the wrong page address to be displayed: see our advisory
   * Fixed a problem with the CRL override for certificates that do not have a CRL specified: Override was not checked
         o Also fixed related problems of a freeze occuring and a handshake that never completed