Red Hat Security Advisory

RHSA-2010:0547

firefox security update

Released 2010-07-21 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-3.6.7-2.el5, firefox-3.6.7-2.el5.i386, firefox-3.6.7-2.el5.ia64 +9
Red Hat Enterprise Linux AS version 4 firefox-3.6.7-2.el4, firefox-3.6.7-2.el4.i386, firefox-3.6.7-2.el4.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.6.7-2.el5, firefox-3.6.7-2.el5.i386, xulrunner-1.9.2.7-2.el5 +2
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xulrunner-1.9.2.7-2.el5, xulrunner-devel-1.9.2.7-2.el5, xulrunner-devel-1.9.2.7-2.el5.i386
Red Hat Enterprise Linux Desktop version 4 firefox-3.6.7-2.el4, firefox-3.6.7-2.el4.i386
Red Hat Enterprise Linux ES version 4 firefox-3.6.7-2.el4, firefox-3.6.7-2.el4.i386, firefox-3.6.7-2.el4.ia64
Red Hat Enterprise Linux WS version 4 firefox-3.6.7-2.el4, firefox-3.6.7-2.el4.i386, firefox-3.6.7-2.el4.ia64

Fixes 16 records

TI-2010-01161 CVE-2010-1205 · GHSA-qq2m-25fj-pxvm

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in…

HIGH 71

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43382 Published 2010-06-30 Fixed CWE-120

TI-2010-02636 CVE-2010-2752 · GHSA-p77q-96cj-c83q

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x…

MEDIUM 52

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbit…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09782 Published 2010-07-30 Fixed CWE-189

TI-2010-01170 CVE-2010-1214 · GHSA-pwm3-w76v-hxc8

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and…

MEDIUM 50

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07585 Published 2010-07-30 Fixed CWE-189

TI-2010-02637 CVE-2010-2753 · GHSA-m5jc-6mwc-7vc7

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7…

MEDIUM 48

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a la…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06672 Published 2010-07-30 Fixed CWE-190

TI-2010-01165 CVE-2010-1209 · GHSA-jmgm-4732-hpm6

Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x…

MEDIUM 48

Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted N…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05384 Published 2010-07-30 Fixed CWE-399

TI-2010-01167 CVE-2010-1211 · GHSA-f87p-c7ww-g83p

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x…

MEDIUM 46

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote att…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03726 Published 2010-07-30 Fixed

TI-2010-01164 CVE-2010-1208 · GHSA-vw3x-5825-83ph

Use-after-free vulnerability in the attribute-cloning functionality in the DOM…

MEDIUM 46

Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05153 Published 2010-07-30 Fixed CWE-416

TI-2010-01168 CVE-2010-1212 · GHSA-wf8r-j8q5-35hw

js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and…

MEDIUM 45

js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibl…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02726 Published 2010-07-30 Fixed CWE-119

TI-2010-01171 CVE-2010-1215 · GHSA-qpxw-xx5g-34gg

Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly…

LOW 33

Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01489 Published 2010-07-30 Fixed CWE-94

TI-2010-02638 CVE-2010-2754 · GHSA-whp6-g3v5-mxmh

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before…

LOW 25

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in c…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01069 Published 2010-07-29 Partial fix CWE-200

TI-2010-00623 CVE-2010-0654 · GHSA-xv3r-wcc2-gmq8

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before…

LOW 24

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet downlo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01867 Published 2010-02-18 Fixed CWE-200

TI-2010-01166 CVE-2010-1210 · GHSA-446p-4x7p-gxv7

intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird…

LOW 23

intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easie…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01557 Published 2010-07-30 Partial fix CWE-20

TI-2010-01163 CVE-2010-1207 · GHSA-pfmg-rcmr-r4cf

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read…

LOW 23

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01583 Published 2010-07-30 Partial fix CWE-264

TI-2010-01169 CVE-2010-1213 · GHSA-m896-jx8r-g62c

The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x…

LOW 22

The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid J…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00957 Published 2010-07-30 Partial fix CWE-20

TI-2010-01162 CVE-2010-1206 · GHSA-4qrq-qhhp-x9r2

The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox…

LOW 22

The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.011 Published 2010-06-25 Partial fix CWE-264

TI-2010-02635 CVE-2010-2751 · GHSA-rgc3-g75g-jr7f

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla…

LOW 17

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01873 Published 2010-07-30 Partial fix CWE-264