Red Hat Security AdvisoryRHSA-2013:0271
firefox security update
Released 2013-02-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) devhelp-0.12-23.el5_9, devhelp-0.12-23.el5_9.i386, devhelp-0.12-23.el5_9.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 6) firefox-17.0.3-1.el6_3, libproxy-0.3.0-4.el6_3, libproxy-bin-0.3.0-4.el6_3 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libproxy-0.3.0-4.el6_3, libproxy-devel-0.3.0-4.el6_3, libproxy-gnome-0.3.0-4.el6_3 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-17.0.3-1.el6_3, libproxy-0.3.0-4.el6_3, libproxy-bin-0.3.0-4.el6_3 +9
- Red Hat Enterprise Linux Server (v. 6) firefox-17.0.3-1.el6_3, firefox-17.0.3-1.el6_3.ppc, libproxy-0.3.0-4.el6_3 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libproxy-0.3.0-4.el6_3, libproxy-devel-0.3.0-4.el6_3, libproxy-devel-0.3.0-4.el6_3.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) firefox-17.0.3-1.el6_3, libproxy-0.3.0-4.el6_3, libproxy-bin-0.3.0-4.el6_3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libproxy-0.3.0-4.el6_3, libproxy-devel-0.3.0-4.el6_3, libproxy-gnome-0.3.0-4.el6_3 +5
Fixes 5 records
Priority MEDIUM 48
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04676 · Published 2013-02-19 · Partial fix
Priority MEDIUM 48
Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05364 · Published 2013-02-19 · Partial fix CWE-787
Priority MEDIUM 47
Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMon…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0442 · Published 2013-02-19 · Partial fix CWE-416
Priority MEDIUM 46
Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03498 · Published 2013-02-19 · Fixed CWE-416
Priority LOW 21
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operatin…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.013 · Published 2013-02-19 · Partial fix CWE-295
THREATIST.IORead the docs