Red Hat Security Advisory

RHSA-2007:0724

firefox security update

Released 2007-07-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-1.5.0.12-3.el5, firefox-1.5.0.12-3.el5.i386, firefox-1.5.0.12-3.el5.ia64 +1
Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.3.el4, firefox-1.5.0.12-0.3.el4.i386, firefox-1.5.0.12-0.3.el4.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-1.5.0.12-3.el5, firefox-1.5.0.12-3.el5.i386
Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.3.el4, firefox-1.5.0.12-0.3.el4.i386
Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.3.el4, firefox-1.5.0.12-0.3.el4.i386, firefox-1.5.0.12-0.3.el4.ia64
Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.3.el4, firefox-1.5.0.12-0.3.el4.i386, firefox-1.5.0.12-0.3.el4.ia64

Fixes 7 records

TI-2007-03626 CVE-2007-3737 · GHSA-jf32-xh25-m8f3

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with…

MEDIUM 48

Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04618 Published 2007-07-18 Fixed

TI-2007-03627 CVE-2007-3738 · GHSA-p4qw-x342-xjwx

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote…

MEDIUM 47

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03799 Published 2007-07-18 Fixed

TI-2007-03624 CVE-2007-3735 · GHSA-mjwf-678w-9h27

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before…

MEDIUM 44

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trig…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02224 Published 2007-07-18 Fixed

TI-2007-03623 CVE-2007-3734 · GHSA-gcr8-9vc3-vvv4

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 44

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02224 Published 2007-07-18 Fixed

TI-2007-03547 CVE-2007-3656 · GHSA-wvwp-cg36-hgrc

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security…

LOW 34

Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01966 Published 2007-07-10 Fixed CWE-200

TI-2007-02988 CVE-2007-3089 · GHSA-w739-3fq5-fgvp

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an…

LOW 25

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02774 Published 2007-06-06 Fixed

TI-2007-03625 CVE-2007-3736 · GHSA-wchf-965x-6qj3

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01349 Published 2007-07-18 Fixed