Red Hat Security AdvisoryRHSA-2011:0471
firefox security update
Released 2011-04-29 · Red Hat rating Critical · View on Red Hat →
Fixes 15 records
Priority HIGH 81
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.74421 · Published 2011-05-07 · Fixed CWE-399
Priority HIGH 80
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.70893 · Published 2011-05-07 · Fixed CWE-20
Priority MEDIUM 53
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07104 · Published 2011-05-07 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07104 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption an…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05118 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial o…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05655 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05448 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05448 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05448 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05448 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05448 · Published 2011-05-07 · Fixed
Priority MEDIUM 51
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04913 · Published 2011-05-07 · Fixed CWE-399
Priority LOW 28
Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrar…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02896 · Published 2011-05-07 · Fixed CWE-22
Priority LOW 27
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02255 · Published 2011-05-07 · Fixed CWE-20
Priority LOW 25
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02491 · Published 2011-03-11 · Partial fix CWE-200