Red Hat Security AdvisoryRHSA-2012:1407
firefox security update
Released 2012-10-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) xulrunner-10.0.10-1.el5_8, xulrunner-devel-10.0.10-1.el5_8, xulrunner-devel-10.0.10-1.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) firefox-10.0.10-1.el5_8, firefox-10.0.10-1.el5_8.i386, firefox-10.0.10-1.el5_8.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-10.0.10-1.el5_8, firefox-10.0.10-1.el5_8.i386, xulrunner-10.0.10-1.el5_8 +1
- Red Hat Enterprise Linux Desktop (v. 6) firefox-10.0.10-1.el6_3, xulrunner-10.0.10-1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-10.0.10-1.el6_3, xulrunner-devel-10.0.10-1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-10.0.10-1.el6_3, xulrunner-10.0.10-1.el6_3, xulrunner-devel-10.0.10-1.el6_3
- Red Hat Enterprise Linux Server (v. 6) firefox-10.0.10-1.el6_3, firefox-10.0.10-1.el6_3.ppc, xulrunner-10.0.10-1.el6_3 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-10.0.10-1.el6_3, xulrunner-devel-10.0.10-1.el6_3, xulrunner-devel-10.0.10-1.el6_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-10.0.10-1.el6_3, xulrunner-10.0.10-1.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-10.0.10-1.el6_3, xulrunner-devel-10.0.10-1.el6_3
Fixes 3 records
Priority LOW 34
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03287 · Published 2012-10-29 · Fixed CWE-74
Priority LOW 25
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02835 · Published 2012-10-29 · Fixed CWE-79
Priority LOW 24
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01902 · Published 2012-10-29 · Fixed CWE-79
THREATIST.IORead the docs