Mozilla Adds Web Audio Capabilities And Security Updates To Firefox 25

Mozilla says Firefox 25 for desktops and mobile devices will add a number of new features, including Web audio capabilities and at least ten security updates for the open source browser.

Most existing desktop users will get the new browser update as an automatic background update, while it is also available as a free download from Mozilla.

Mozilla rates as critical five of the security updates for Firefox 25. All five of the issues relate to various memory corruption risks that could potentially enable an attacker to use system memory to launch arbitrary code.

Security updates

The new release also provides a security fix for a flaw that leverages the HTML iFrames element and Mozilla warned in its security advisory that there was a flaw by which an attacker could maliciously manipulate an iFrame with the PDF.js library for rendering PDFs.

“This can be used to bypass security restrictions to load local or chrome privileged files and objects within the embedded PDF object,” Mozilla adviss. “This can lead to information disclosure of local system files.”

Mozilla is also providing a fix for a spoofing security flaw that is rated as having moderate severity.

“Security researcher Jordi Chancel discovered a method to put arbitrary HTML content within <select> elements and place it in arbitrary locations,” Mozilla warns in its advisory. “This can be used to spoof the displayed address bar, leading to click-jacking and other spoofing attacks.”

Firefox 25 for Android introduces a concept called “guest browsing,” which will complement regular and private-mode browsing options.

Guest browsing

“Guest browsing opens an entirely clean Firefox profile, which means the guest cannot access any bookmarks, settings or other data associated with the owner’s Firefox browser,” says Karen Rudnitski, Firefox for Android product manager. “With private browsing, Firefox doesn’t store the information on the Web pages you are visiting, but you still have access to your own bookmarks, non-private history, settings and customizations you have made.”

Firefox 25 also marks the debut of new Web audio capabilities in the open-source Web browser. While Firefox has supported the HTML5 audio tag since 2009, the new feature in Firefox 25 goes beyond what has been available to date.

The audio tag is for media playback (playback of audio) while the new Web Audio API is a powerful tool for audio generation, Gavin Sharp, lead Firefox engineer at Mozilla explains.

Another enhancement in Firefox 25 is one that aims to help make it easier for users to find content inside a Web page. “The Find bar now is no longer persistent on every tab,” Sharp says. “This means the Find bar is there when you want to use it but is no longer there when you move on to a new tab and no longer need to find something.”

Are you a Firefox enthusiast? Take our quiz!

Originally published on eWeek.