Red Hat Security AdvisoryRHSA-2012:0387
firefox security and bug fix update
Released 2012-03-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) xulrunner-10.0.3-1.el5_8, xulrunner-devel-10.0.3-1.el5_8, xulrunner-devel-10.0.3-1.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) firefox-10.0.3-1.el5_8, firefox-10.0.3-1.el5_8.i386, firefox-10.0.3-1.el5_8.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-10.0.3-1.el5_8, firefox-10.0.3-1.el5_8.i386, xulrunner-10.0.3-1.el5_8 +1
- Red Hat Enterprise Linux Desktop (v. 6) firefox-10.0.3-1.el6_2, xulrunner-10.0.3-1.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-10.0.3-1.el6_2, xulrunner-devel-10.0.3-1.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-10.0.3-1.el6_2, xulrunner-10.0.3-1.el6_2, xulrunner-devel-10.0.3-1.el6_2
- Red Hat Enterprise Linux Server (v. 6) firefox-10.0.3-1.el6_2, firefox-10.0.3-1.el6_2.ppc, xulrunner-10.0.3-1.el6_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-10.0.3-1.el6_2, xulrunner-devel-10.0.3-1.el6_2, xulrunner-devel-10.0.3-1.el6_2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-10.0.3-1.el6_2, xulrunner-10.0.3-1.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-10.0.3-1.el6_2, xulrunner-devel-10.0.3-1.el6_2
Fixes 10 records
Priority MEDIUM 49
Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 throu…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06502 · Published 2012-03-14 · Partial fix CWE-399
Priority MEDIUM 40
Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03954 · Published 2012-03-14 · Partial fix CWE-399
Priority LOW 39
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03773 · Published 2012-03-14 · Partial fix
Priority LOW 39
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x befor…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0333 · Published 2012-03-14 · Partial fix
Priority LOW 39
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remot…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03819 · Published 2012-03-14 · Fixed CWE-264
Priority LOW 35
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict se…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02672 · Published 2012-03-14 · Partial fix CWE-264
Priority LOW 32
Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.01932 · Published 2012-03-14 · Fixed CWE-264
Priority LOW 28
The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey befo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0256 · Published 2012-03-14 · Partial fix CWE-200
Priority LOW 25
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to by…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02354 · Published 2012-03-14 · Fixed CWE-94
Priority LOW 23
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict dr…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01702 · Published 2012-03-14 · Partial fix CWE-79
THREATIST.IORead the docs