Red Hat Security Advisory

RHSA-2008:0879

firefox security update

Released 2008-09-24 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) devhelp-0.12-19.el5, devhelp-0.12-19.el5.i386, devhelp-0.12-19.el5.ia64 +41
Red Hat Enterprise Linux AS version 4 firefox-3.0.2-3.el4, firefox-3.0.2-3.el4.i386, firefox-3.0.2-3.el4.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) devhelp-0.12-19.el5, devhelp-0.12-19.el5.i386, firefox-3.0.2-3.el5 +9
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) devhelp-0.12-19.el5, devhelp-devel-0.12-19.el5, devhelp-devel-0.12-19.el5.i386 +10
Red Hat Enterprise Linux Desktop version 4 firefox-3.0.2-3.el4, firefox-3.0.2-3.el4.i386
Red Hat Enterprise Linux ES version 4 firefox-3.0.2-3.el4, firefox-3.0.2-3.el4.i386, firefox-3.0.2-3.el4.ia64
Red Hat Enterprise Linux WS version 4 firefox-3.0.2-3.el4, firefox-3.0.2-3.el4.i386, firefox-3.0.2-3.el4.ia64

Fixes 10 records

TI-2008-03898 CVE-2008-4064 · GHSA-cpqh-mhhx-jwmj

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote…

MEDIUM 51

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors relate…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04872 Published 2008-09-24 Fixed CWE-399

TI-2008-03896 CVE-2008-4062 · GHSA-3wj5-57jg-38cx

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before…

MEDIUM 51

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruptio…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04988 Published 2008-09-24 Fixed CWE-399

TI-2008-03895 CVE-2008-4061 · GHSA-m8rr-82xh-5wmh

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x…

MEDIUM 51

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corr…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04988 Published 2008-09-24 Fixed CWE-189

TI-2008-03897 CVE-2008-4063 · GHSA-jrcw-h5xr-875m

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03959 Published 2008-09-24 Fixed

TI-2008-03676 CVE-2008-3837 · GHSA-w2pf-f3c3-85m7

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow…

MEDIUM 46

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03268 Published 2008-09-24 Fixed

TI-2008-03902 CVE-2008-4068 · GHSA-qx75-v3cf-r4q5

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before…

MEDIUM 41

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML fi…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04166 Published 2008-09-24 Fixed CWE-22

TI-2008-03894 CVE-2008-4060 · GHSA-vgvw-jj2g-rp9v

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and…

MEDIUM 41

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04802 Published 2008-09-24 Fixed CWE-264

TI-2008-03892 CVE-2008-4058 · GHSA-r5wp-hj94-74j8

The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2…

MEDIUM 41

The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05077 Published 2008-09-24 Fixed CWE-264

TI-2008-03901 CVE-2008-4067 · GHSA-x8g4-45jp-4ff6

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before…

LOW 27

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04438 Published 2008-09-24 Fixed CWE-22

TI-2008-03899 CVE-2008-4065 · GHSA-xppm-mp6m-c6fw

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and…

LOW 27

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0411 Published 2008-09-24 Fixed CWE-79