Red Hat Security AdvisoryRHSA-2010:0332
firefox security update
Released 2010-03-30 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-3.0.19-1.el5_5, firefox-3.0.19-1.el5_5.i386, firefox-3.0.19-1.el5_5.ia64 +13
- Red Hat Enterprise Linux AS version 4 firefox-3.0.19-1.el4, firefox-3.0.19-1.el4.i386, firefox-3.0.19-1.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.0.19-1.el5_5, firefox-3.0.19-1.el5_5.i386, xulrunner-1.9.0.19-1.el5_5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xulrunner-1.9.0.19-1.el5_5, xulrunner-devel-1.9.0.19-1.el5_5, xulrunner-devel-1.9.0.19-1.el5_5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 firefox-3.0.19-1.el4, firefox-3.0.19-1.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-3.0.19-1.el4, firefox-3.0.19-1.el4.i386, firefox-3.0.19-1.el4.ia64
- Red Hat Enterprise Linux WS version 4 firefox-3.0.19-1.el4, firefox-3.0.19-1.el4.i386, firefox-3.0.19-1.el4.ia64
Fixes 6 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to caus…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05922 · Published 2010-04-05 · Fixed
Priority MEDIUM 50
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06938 · Published 2010-04-05 · Fixed CWE-399
Priority MEDIUM 50
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrar…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06997 · Published 2010-04-05 · Fixed CWE-399
Priority MEDIUM 48
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which mi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05161 · Published 2010-04-05 · Fixed CWE-399
Priority LOW 39
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to ex…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.03403 · Published 2010-04-05 · Fixed CWE-94
Priority LOW 29
Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03275 · Published 2010-04-05 · Fixed CWE-94
THREATIST.IORead the docs