Red Hat Security AdvisoryRHSA-2011:1164
firefox security update
Released 2011-08-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-3.6.20-2.el5, firefox-3.6.20-2.el5.i386, firefox-3.6.20-2.el5.ia64 +9
- Red Hat Enterprise Linux AS version 4 firefox-3.6.20-2.el4, firefox-3.6.20-2.el4.i386, firefox-3.6.20-2.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.6.20-2.el5, firefox-3.6.20-2.el5.i386, xulrunner-1.9.2.20-2.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xulrunner-1.9.2.20-2.el5, xulrunner-devel-1.9.2.20-2.el5, xulrunner-devel-1.9.2.20-2.el5.i386
- Red Hat Enterprise Linux Desktop version 4 firefox-3.6.20-2.el4, firefox-3.6.20-2.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-3.6.20-2.el4, firefox-3.6.20-2.el4.i386, firefox-3.6.20-2.el4.ia64
- Red Hat Enterprise Linux Server (v. 6) firefox-3.6.20-2.el6_1, firefox-3.6.20-2.el6_1.ppc, xulrunner-1.9.2.20-2.el6_1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-1.9.2.20-2.el6_1, xulrunner-devel-1.9.2.20-2.el6_1, xulrunner-devel-1.9.2.20-2.el6_1.ppc
- Red Hat Enterprise Linux WS version 4 firefox-3.6.20-2.el4, firefox-3.6.20-2.el4.i386, firefox-3.6.20-2.el4.ia64
Fixes 6 records
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a den…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05312 · Published 2011-08-18 · Fixed
Priority MEDIUM 51
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrar…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05608 · Published 2011-08-18 · Fixed CWE-94
Priority MEDIUM 51
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04805 · Published 2011-08-18 · Fixed CWE-94
Priority MEDIUM 49
Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScri…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03591 · Published 2011-08-18 · Partial fix CWE-94
Priority MEDIUM 44
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0226 · Published 2011-08-18 · Fixed CWE-16
Priority LOW 23
Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Sam…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01589 · Published 2011-08-18 · Fixed CWE-200
THREATIST.IORead the docs