Red Hat Security Advisory

RHSA-2012:1088

firefox security update

Released 2012-07-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHEL Desktop Workstation (v. 5 client) xulrunner-10.0.6-2.el5_8, xulrunner-devel-10.0.6-2.el5_8, xulrunner-devel-10.0.6-2.el5_8.i386
Red Hat Enterprise Linux (v. 5 server) firefox-10.0.6-1.el5_8, firefox-10.0.6-1.el5_8.i386, firefox-10.0.6-1.el5_8.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-10.0.6-1.el5_8, firefox-10.0.6-1.el5_8.i386, xulrunner-10.0.6-2.el5_8 +1
Red Hat Enterprise Linux Desktop (v. 6) firefox-10.0.6-1.el6_3, xulrunner-10.0.6-1.el6_3
Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-10.0.6-1.el6_3, xulrunner-devel-10.0.6-1.el6_3
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-10.0.6-1.el6_3, xulrunner-10.0.6-1.el6_3, xulrunner-devel-10.0.6-1.el6_3
Red Hat Enterprise Linux Server (v. 6) firefox-10.0.6-1.el6_3, firefox-10.0.6-1.el6_3.ppc, xulrunner-10.0.6-1.el6_3 +1
Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-10.0.6-1.el6_3, xulrunner-devel-10.0.6-1.el6_3, xulrunner-devel-10.0.6-1.el6_3.ppc
Red Hat Enterprise Linux Workstation (v. 6) firefox-10.0.6-1.el6_3, xulrunner-10.0.6-1.el6_3
Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-10.0.6-1.el6_3, xulrunner-devel-10.0.6-1.el6_3

Fixes 17 records

TI-2012-01739 CVE-2012-1962 · GHSA-vqcw-863f-c794

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla…

MEDIUM 51

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonke…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05593 Published 2012-07-18 Fixed CWE-399

TI-2012-01728 CVE-2012-1951 · GHSA-mm7q-cwwj-hpqx

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla…

MEDIUM 51

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and Se…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05545 Published 2012-07-18 Fixed CWE-399

TI-2012-01744 CVE-2012-1967 · GHSA-4vpm-4rp5-jq9c

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…

MEDIUM 50

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, whic…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03995 Published 2012-07-18 Fixed

TI-2012-01731 CVE-2012-1954 · GHSA-35jh-p5wf-6gg4

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x…

MEDIUM 50

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey befo…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04442 Published 2012-07-18 Fixed CWE-399

TI-2012-01735 CVE-2012-1958 · GHSA-jww3-7hrv-6v2r

Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla…

MEDIUM 48

Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04757 Published 2012-07-18 Fixed CWE-399

TI-2012-01725 CVE-2012-1948 · GHSA-p885-g3fv-7xwr

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through…

MEDIUM 48

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04829 Published 2012-07-18 Fixed

TI-2012-01730 CVE-2012-1953 · GHSA-rf9h-956h-9g4h

The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0…

MEDIUM 47

The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows r…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04315 Published 2012-07-18 Fixed CWE-119

TI-2012-01729 CVE-2012-1952 · GHSA-jfr6-2c38-mp7q

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR…

MEDIUM 46

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly p…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03674 Published 2012-07-18 Fixed CWE-399

TI-2012-01732 CVE-2012-1955 · GHSA-v6r6-j992-622p

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…

LOW 34

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors in…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02311 Published 2012-07-18 Fixed

TI-2012-01727 CVE-2012-1950 · GHSA-wqgg-q2mf-p44h

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x…

LOW 32

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01835 Published 2012-07-18 Fixed

TI-2012-01736 CVE-2012-1959 · GHSA-942g-57h9-xx24

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…

LOW 28

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrap…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02461 Published 2012-07-18 Fixed CWE-264

TI-2012-01743 CVE-2012-1966 · GHSA-fgj8-79hw-hmwq

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same…

LOW 24

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XS…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02191 Published 2012-07-18 Fixed CWE-264

TI-2012-01742 CVE-2012-1965 · GHSA-q7xw-4wrp-fqf4

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly…

LOW 24

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02211 Published 2012-07-18 Fixed CWE-79

TI-2012-01738 CVE-2012-1961 · GHSA-mj4m-9vjr-pmgw

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…

LOW 24

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options hea…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02118 Published 2012-07-18 Fixed CWE-20

TI-2012-01734 CVE-2012-1957 · GHSA-f778-wp6q-3cwj

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x…

LOW 24

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02084 Published 2012-07-18 Fixed CWE-79

TI-2012-01740 CVE-2012-1963 · GHSA-49qg-xp6c-mm46

The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0…

LOW 23

The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not pr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01606 Published 2012-07-18 Fixed CWE-264

TI-2012-01741 CVE-2012-1964 · GHSA-895m-hw9q-p7wj

The certificate-warning functionality in…

LOW 21

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x b…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.0089 Published 2012-07-18 Fixed