Red Hat Security AdvisoryRHSA-2012:0079
firefox security update
Released 2012-02-01 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) xulrunner-1.9.2.26-1.el5_7, xulrunner-devel-1.9.2.26-1.el5_7, xulrunner-devel-1.9.2.26-1.el5_7.i386
- Red Hat Enterprise Linux (v. 5 server) firefox-3.6.26-1.el5_7, firefox-3.6.26-1.el5_7.i386, firefox-3.6.26-1.el5_7.ia64 +9
- Red Hat Enterprise Linux AS version 4 firefox-3.6.26-2.el4, firefox-3.6.26-2.el4.i386, firefox-3.6.26-2.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-3.6.26-1.el5_7, firefox-3.6.26-1.el5_7.i386, xulrunner-1.9.2.26-1.el5_7 +1
- Red Hat Enterprise Linux Desktop (v. 6) firefox-3.6.26-1.el6_2, xulrunner-1.9.2.26-1.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-1.9.2.26-1.el6_2, xulrunner-devel-1.9.2.26-1.el6_2
- Red Hat Enterprise Linux Desktop version 4 firefox-3.6.26-2.el4, firefox-3.6.26-2.el4.i386
- Red Hat Enterprise Linux ES version 4 firefox-3.6.26-2.el4, firefox-3.6.26-2.el4.i386, firefox-3.6.26-2.el4.ia64
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-3.6.26-1.el6_2, xulrunner-1.9.2.26-1.el6_2, xulrunner-devel-1.9.2.26-1.el6_2
- Red Hat Enterprise Linux Server (v. 6) firefox-3.6.26-1.el6_2, firefox-3.6.26-1.el6_2.ppc, xulrunner-1.9.2.26-1.el6_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-1.9.2.26-1.el6_2, xulrunner-devel-1.9.2.26-1.el6_2, xulrunner-devel-1.9.2.26-1.el6_2.ppc
- Red Hat Enterprise Linux WS version 4 firefox-3.6.26-2.el4, firefox-3.6.26-2.el4.i386, firefox-3.6.26-2.el4.ia64
- Red Hat Enterprise Linux Workstation (v. 6) firefox-3.6.26-1.el6_2, xulrunner-1.9.2.26-1.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-1.9.2.26-1.el6_2, xulrunner-devel-1.9.2.26-1.el6_2
Fixes 5 records
Priority HIGH 66
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vector…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.36824 · Published 2012-02-01 · Fixed CWE-416
Priority MEDIUM 53
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07837 · Published 2012-02-01 · Fixed CWE-119
Priority MEDIUM 49
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05735 · Published 2012-02-01 · Partial fix CWE-119
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a d…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04539 · Published 2012-02-01 · Fixed
Priority LOW 27
Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02141 · Published 2012-02-01 · Fixed CWE-200
THREATIST.IORead the docs