Red Hat Security AdvisoryRHSA-2007:0400
firefox security update
Released 2007-05-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) devhelp-0.12-11.el5, devhelp-0.12-11.el5.i386, devhelp-0.12-11.el5.ia64 +13
- Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.1.el4, firefox-1.5.0.12-0.1.el4.i386, firefox-1.5.0.12-0.1.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) devhelp-0.12-11.el5, devhelp-0.12-11.el5.i386, firefox-1.5.0.12-1.el5 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) devhelp-0.12-11.el5, devhelp-devel-0.12-11.el5, devhelp-devel-0.12-11.el5.i386
- Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.1.el4, firefox-1.5.0.12-0.1.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.1.el4, firefox-1.5.0.12-0.1.el4.i386, firefox-1.5.0.12-0.1.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.1.el4, firefox-1.5.0.12-0.1.el4.i386, firefox-1.5.0.12-0.1.el4.ia64
Fixes 7 records
Priority MEDIUM 48
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04868 · Published 2007-06-01 · Fixed CWE-94
Priority MEDIUM 46
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attacke…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03407 · Published 2007-06-01 · Fixed CWE-119
Priority MEDIUM 45
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive informat…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.14271 · Published 2007-03-21 · Fixed CWE-200
Priority LOW 31
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07831 · Published 2007-06-01 · Fixed CWE-20
Priority LOW 25
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the bro…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0249 · Published 2007-06-01 · Fixed
Priority LOW 24
The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01798 · Published 2007-06-01 · Fixed
Priority LOW 23
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01649 · Published 2007-06-01 · Fixed
THREATIST.IORead the docs