Red Hat Security Advisory

RHSA-2009:1530

firefox security update

Released 2009-10-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-3.0.15-3.el5_4, firefox-3.0.15-3.el5_4.i386, firefox-3.0.15-3.el5_4.ia64 +21
Red Hat Enterprise Linux AS version 4 firefox-3.0.15-3.el4, firefox-3.0.15-3.el4.i386, firefox-3.0.15-3.el4.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.0.15-3.el5_4, firefox-3.0.15-3.el5_4.i386, nspr-4.7.6-1.el5_4 +3
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.7.6-1.el5_4, nspr-devel-4.7.6-1.el5_4, nspr-devel-4.7.6-1.el5_4.i386 +5
Red Hat Enterprise Linux Desktop version 4 firefox-3.0.15-3.el4, firefox-3.0.15-3.el4.i386, nspr-4.7.6-1.el4_8 +3
Red Hat Enterprise Linux ES version 4 firefox-3.0.15-3.el4, firefox-3.0.15-3.el4.i386, firefox-3.0.15-3.el4.ia64 +6
Red Hat Enterprise Linux WS version 4 firefox-3.0.15-3.el4, firefox-3.0.15-3.el4.i386, firefox-3.0.15-3.el4.ia64 +6

Fixes 11 records

TI-2009-03215 CVE-2009-3373 · GHSA-429c-wjm9-c577

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and…

MEDIUM 59

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15519 Published 2009-10-29 Fixed CWE-119

TI-2009-03224 CVE-2009-3382 · GHSA-xrcj-j2px-vg49

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x…

MEDIUM 56

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corrupti…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10843 Published 2009-10-29 Fixed

TI-2009-00658 CVE-2009-0689 · GHSA-99jp-rppc-jgcm

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2)…

MEDIUM 53

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.29381 Published 2009-07-01 Partial fix CWE-119

TI-2009-03222 CVE-2009-3380 · GHSA-jq7h-9pm6-x65q

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x…

MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or po…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05458 Published 2009-10-29 Fixed

TI-2009-03214 CVE-2009-3372 · GHSA-74jj-5cp3-vhx3

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows…

MEDIUM 47

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03985 Published 2009-10-29 Fixed

TI-2009-03226 CVE-2009-3384 · GHSA-j32g-6wjv-jxxr

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows…

MEDIUM 46

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03478 Published 2009-11-13 Fixed

TI-2009-03218 CVE-2009-3376 · GHSA-xgrc-85pp-86cg

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not…

MEDIUM 46

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attacker…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03183 Published 2009-10-29 Fixed CWE-16

TI-2009-03216 CVE-2009-3374 · GHSA-wr76-gg23-hq72

The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox…

LOW 37

The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01981 Published 2009-10-29 Fixed CWE-264

TI-2009-03212 CVE-2009-3370 · GHSA-m9x4-cr95-4r8p

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read…

LOW 27

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readabl…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01983 Published 2009-10-29 Fixed

TI-2009-03217 CVE-2009-3375 · GHSA-w757-mvqp-v98h

content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and…

LOW 23

content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection vi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01674 Published 2009-10-29 Fixed CWE-264

TI-2009-03118 CVE-2009-3274 · GHSA-r6ww-vw3x-xp48

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier…

LOW 20

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local use…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00292 Published 2009-09-21 Fixed