Red Hat Security Advisory

RHSA-2009:1430

firefox security update

Released 2009-09-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-3.0.14-1.el5_4, firefox-3.0.14-1.el5_4.i386, firefox-3.0.14-1.el5_4.ia64 +21
Red Hat Enterprise Linux AS version 4 firefox-3.0.14-1.el4, firefox-3.0.14-1.el4.i386, firefox-3.0.14-1.el4.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.0.14-1.el5_4, firefox-3.0.14-1.el5_4.i386, nspr-4.7.5-1.el5_4 +3
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.7.5-1.el5_4, nspr-devel-4.7.5-1.el5_4, nspr-devel-4.7.5-1.el5_4.i386 +5
Red Hat Enterprise Linux Desktop version 4 firefox-3.0.14-1.el4, firefox-3.0.14-1.el4.i386, nspr-4.7.5-1.el4_8 +3
Red Hat Enterprise Linux ES version 4 firefox-3.0.14-1.el4, firefox-3.0.14-1.el4.i386, firefox-3.0.14-1.el4.ia64 +6
Red Hat Enterprise Linux WS version 4 firefox-3.0.14-1.el4, firefox-3.0.14-1.el4.i386, firefox-3.0.14-1.el4.ia64 +6

Fixes 10 records

TI-2009-02930 CVE-2009-3075 · GHSA-5p9h-x8mc-2cx4

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before…

MEDIUM 51

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05269 Published 2009-09-10 Fixed

TI-2009-02929 CVE-2009-3074 · GHSA-qr4p-ppj7-4xcx

Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14…

MEDIUM 51

Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via un…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05452 Published 2009-09-10 Fixed

TI-2009-02927 CVE-2009-3072 · GHSA-8cxh-33q5-hvj6

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of ser…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05269 Published 2009-09-10 Fixed

TI-2009-02926 CVE-2009-3071 · GHSA-96fh-38m4-95mm

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possib…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05452 Published 2009-09-10 Fixed

TI-2009-02925 CVE-2009-3070 · GHSA-hx9x-3jpr-5g63

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05452 Published 2009-09-10 Fixed

TI-2009-02931 CVE-2009-3076 · GHSA-38w6-8hf5-r299

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with…

MEDIUM 50

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into i…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06724 Published 2009-09-10 Fixed

TI-2009-02934 CVE-2009-3079 · GHSA-pgvx-j63m-jjgr

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3…

MEDIUM 49

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03869 Published 2009-09-10 Fixed CWE-94

TI-2009-02932 CVE-2009-3077 · GHSA-pw85-c3xj-rm6m

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers…

MEDIUM 48

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04623 Published 2009-09-10 Fixed CWE-94

TI-2009-02536 CVE-2009-2654 · GHSA-4h5h-76c6-8744

Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof…

LOW 34

Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in t…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04745 Published 2009-08-03 Fixed CWE-20

TI-2009-02933 CVE-2009-3078 · GHSA-q948-rp96-c8w7

Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3…

LOW 27

Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height pro…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02245 Published 2009-09-10 Fixed CWE-20