Red Hat Security AdvisoryRHSA-2008:0598
firefox security update
Released 2008-07-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS EUS (v. 4.5) firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386, firefox-1.5.0.12-0.21.el4.ia64 +1
- Red Hat Enterprise Linux AS version 4 firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386, firefox-1.5.0.12-0.21.el4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386
- Red Hat Enterprise Linux ES EUS (v. 4.5) firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386, firefox-1.5.0.12-0.21.el4.ia64
- Red Hat Enterprise Linux ES version 4 firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386, firefox-1.5.0.12-0.21.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-1.5.0.12-0.21.el4, firefox-1.5.0.12-0.21.el4.i386, firefox-1.5.0.12-0.21.el4.ia64
Fixes 2 records
Priority MEDIUM 48
Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Ar…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05284 · Published 2008-06-19 · Fixed CWE-189
Priority LOW 18
Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary lo…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02753 · Published 2008-07-17 · Fixed CWE-20
