Red Hat Security AdvisoryRHSA-2009:1674
firefox security update
Released 2009-12-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-3.0.16-1.el5_4, firefox-3.0.16-1.el5_4.i386, firefox-3.0.16-1.el5_4.ia64 +13
- Red Hat Enterprise Linux AS version 4 firefox-3.0.16-4.el4, firefox-3.0.16-4.el4.i386, firefox-3.0.16-4.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.0.16-1.el5_4, firefox-3.0.16-1.el5_4.i386, xulrunner-1.9.0.16-2.el5_4 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xulrunner-1.9.0.16-2.el5_4, xulrunner-devel-1.9.0.16-2.el5_4, xulrunner-devel-1.9.0.16-2.el5_4.i386 +2
- Red Hat Enterprise Linux Desktop version 4 firefox-3.0.16-4.el4, firefox-3.0.16-4.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-3.0.16-4.el4, firefox-3.0.16-4.el4.i386, firefox-3.0.16-4.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-3.0.16-4.el4, firefox-3.0.16-4.el4.i386, firefox-3.0.16-4.el4.ia64
Fixes 6 records
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03963 · Published 2009-12-17 · Fixed
Priority MEDIUM 46
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03722 · Published 2009-12-17 · Fixed
Priority MEDIUM 40
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.03707 · Published 2009-12-17 · Fixed CWE-94
Priority LOW 35
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitr…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02539 · Published 2009-12-17 · Fixed
Priority LOW 34
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0219 · Published 2009-12-17 · Fixed
Priority LOW 34
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02202 · Published 2009-12-17 · Fixed
THREATIST.IORead the docs