Red Hat Security Advisory

RHSA-2012:1350

firefox security and bug fix update

Released 2012-10-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHEL Desktop Workstation (v. 5 client) xulrunner-10.0.8-1.el5_8, xulrunner-devel-10.0.8-1.el5_8, xulrunner-devel-10.0.8-1.el5_8.i386
Red Hat Enterprise Linux (v. 5 server) firefox-10.0.8-1.el5_8, firefox-10.0.8-1.el5_8.i386, firefox-10.0.8-1.el5_8.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-10.0.8-1.el5_8, firefox-10.0.8-1.el5_8.i386, xulrunner-10.0.8-1.el5_8 +1
Red Hat Enterprise Linux Desktop (v. 6) firefox-10.0.8-1.el6_3, xulrunner-10.0.8-1.el6_3
Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-10.0.8-1.el6_3, xulrunner-devel-10.0.8-1.el6_3
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-10.0.8-1.el6_3, xulrunner-10.0.8-1.el6_3, xulrunner-devel-10.0.8-1.el6_3
Red Hat Enterprise Linux Server (v. 6) firefox-10.0.8-1.el6_3, firefox-10.0.8-1.el6_3.ppc, xulrunner-10.0.8-1.el6_3 +1
Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-10.0.8-1.el6_3, xulrunner-devel-10.0.8-1.el6_3, xulrunner-devel-10.0.8-1.el6_3.ppc
Red Hat Enterprise Linux Workstation (v. 6) firefox-10.0.8-1.el6_3, xulrunner-10.0.8-1.el6_3
Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-10.0.8-1.el6_3, xulrunner-devel-10.0.8-1.el6_3

Fixes 20 records

TI-2012-03413 CVE-2012-3993 · GHSA-3587-g6j7-969g

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox…

HIGH 69

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly inte…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.42609 Published 2012-10-10 Fixed CWE-269

TI-2012-03577 CVE-2012-4188 · GHSA-2vjp-w357-hqrg

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0…

MEDIUM 56

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.147 Published 2012-10-10 Fixed CWE-119

TI-2012-03575 CVE-2012-4186 · GHSA-q5f9-pv86-jvpw

Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla…

MEDIUM 56

Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.147 Published 2012-10-10 Fixed CWE-119

TI-2012-03569 CVE-2012-4180 · GHSA-5gp9-q9jf-wgmv

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in…

MEDIUM 52

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonk…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09274 Published 2012-10-10 Fixed CWE-119

TI-2012-03574 CVE-2012-4185 · GHSA-fvw4-65jg-8pj2

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0…

MEDIUM 51

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote at…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08572 Published 2012-10-10 Fixed CWE-119

TI-2012-03576 CVE-2012-4187 · GHSA-jmrq-x79h-whx2

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0…

MEDIUM 50

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote at…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06842 Published 2012-10-10 Fixed CWE-119

TI-2012-03572 CVE-2012-4183 · GHSA-5223-3442-qp3j

Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla…

MEDIUM 48

Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey bef…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04803 Published 2012-10-10 Fixed CWE-416

TI-2012-03571 CVE-2012-4182 · GHSA-q6jg-67q9-f4hj

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla…

MEDIUM 48

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04727 Published 2012-10-10 Fixed CWE-416

TI-2012-03570 CVE-2012-4181 · GHSA-p7v4-hxpj-8rjp

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in…

MEDIUM 48

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04803 Published 2012-10-10 Fixed CWE-416

TI-2012-03568 CVE-2012-4179 · GHSA-w3h3-5p95-fv5g

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in…

MEDIUM 48

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04727 Published 2012-10-10 Fixed CWE-416

TI-2012-03415 CVE-2012-3995 · GHSA-vw8c-7vr6-cqvp

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x…

MEDIUM 48

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05018 Published 2012-10-10 Fixed CWE-125

TI-2012-03410 CVE-2012-3990 · GHSA-6h5m-g68r-8p3j

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox…

MEDIUM 48

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05201 Published 2012-10-10 Fixed CWE-416

TI-2012-03408 CVE-2012-3988 · GHSA-wc4c-2hhq-9f86

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before…

MEDIUM 48

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attacke…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05201 Published 2012-10-10 Fixed CWE-416

TI-2012-03402 CVE-2012-3982 · GHSA-wqjw-25wv-2769

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 48

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04727 Published 2012-10-10 Fixed

TI-2012-03411 CVE-2012-3991 · GHSA-7p4h-229r-4w4m

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0…

MEDIUM 46

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03078 Published 2012-10-10 Fixed CWE-264

TI-2012-03414 CVE-2012-3994 · GHSA-vrqh-q75j-j6x8

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0…

LOW 25

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02388 Published 2012-10-10 Fixed CWE-79

TI-2012-03412 CVE-2012-3992 · GHSA-6x5v-cwgm-x5w9

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0…

LOW 25

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02513 Published 2012-10-10 Fixed CWE-79

TI-2012-03406 CVE-2012-3986 · GHSA-m85c-qm6x-g3rc

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0…

LOW 25

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02512 Published 2012-10-10 Fixed CWE-20

TI-2012-03573 CVE-2012-4184 · GHSA-j9vm-hppw-gg7g

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox…

LOW 24

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01802 Published 2012-10-10 Fixed CWE-79

TI-2012-01733 CVE-2012-1956 · GHSA-8449-cw6v-fqcw

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not…

LOW 24

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01888 Published 2012-08-29 Fixed CWE-79