Red Hat Security AdvisoryRHSA-2009:0397
firefox security update
Released 2009-03-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xulrunner-1.9.0.7-3.el5, xulrunner-1.9.0.7-3.el5.i386, xulrunner-1.9.0.7-3.el5.ia64 +9
- Red Hat Enterprise Linux AS version 4 firefox-3.0.7-3.el4, firefox-3.0.7-3.el4.i386, firefox-3.0.7-3.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xulrunner-1.9.0.7-3.el5, xulrunner-1.9.0.7-3.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xulrunner-1.9.0.7-3.el5, xulrunner-devel-1.9.0.7-3.el5, xulrunner-devel-1.9.0.7-3.el5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 firefox-3.0.7-3.el4, firefox-3.0.7-3.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-3.0.7-3.el4, firefox-3.0.7-3.el4.i386, firefox-3.0.7-3.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-3.0.7-3.el4, firefox-3.0.7-3.el4.i386, firefox-3.0.7-3.el4.ia64
Fixes 2 records
Priority MEDIUM 53
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10464 · Published 2009-03-27 · Fixed CWE-399
Priority MEDIUM 49
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0649 · Published 2009-03-23 · Fixed CWE-399
