More fixes issued for Mozilla Firefox 16

Firefox 16 has had to be updated once again due to yet more security issues.

The latest series of problems to plague Mozilla's newest web browser are all related to the Location object and were labelled by Mozilla as "critical."

When paired with a selection of plug-ins, one of the vulnerabilities could have been manipulated and used to force malicious code upon unsuspecting users, in a cross-site scripting attack. A separate flaw had the potential to be exploited in order to execute arbitrary code to a browser add-on interacting with a page's content – another cross-site scripting assault. The third and final weakness could have allowed hackers to easily bypass the security wrapper on the Location object.

Firefox 16.0.2 is available for download now.

Firefox 16 was released on 9 October but experienced difficulties immediately. The day after its release, the service was removed from Mozilla's installer page while fixes underwent construction.

Thunderbird, Mozilla's email client, was also subject to an update, due to similar security problems. However, Mozilla has maintained that these vulnerabilities were less dangerous than those found in Firefox.