Red Hat Security AdvisoryRHSA-2007:1082
firefox security update
Released 2007-11-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-1.5.0.12-7.el5, firefox-1.5.0.12-7.el5.i386, firefox-1.5.0.12-7.el5.ia64 +1
- Red Hat Enterprise Linux AS EUS (v. 4.5) firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386, firefox-1.5.0.12-0.8.el4.ia64 +1
- Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386, firefox-1.5.0.12-0.8.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-1.5.0.12-7.el5, firefox-1.5.0.12-7.el5.i386
- Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386
- Red Hat Enterprise Linux ES EUS (v. 4.5) firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386, firefox-1.5.0.12-0.8.el4.ia64
- Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386, firefox-1.5.0.12-0.8.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.8.el4, firefox-1.5.0.12-0.8.el4.i386, firefox-1.5.0.12-0.8.el4.ia64
Fixes 3 records
Priority MEDIUM 48
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05443 · Published 2007-11-26 · Fixed
Priority LOW 25
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02712 · Published 2007-11-14 · Fixed CWE-79
Priority LOW 23
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01469 · Published 2007-11-26 · Fixed CWE-22
THREATIST.IORead the docs