Red Hat Security AdvisoryRHSA-2013:1140
firefox security update
Released 2013-08-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-17.0.8-1.el5_9, firefox-17.0.8-1.el5_9.i386, firefox-17.0.8-1.el5_9.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) firefox-17.0.8-1.el6_4, xulrunner-17.0.8-3.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-17.0.8-3.el6_4, xulrunner-devel-17.0.8-3.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-17.0.8-1.el6_4, xulrunner-17.0.8-3.el6_4, xulrunner-devel-17.0.8-3.el6_4
- Red Hat Enterprise Linux Server (v. 6) firefox-17.0.8-1.el6_4, firefox-17.0.8-1.el6_4.ppc, xulrunner-17.0.8-3.el6_4 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-17.0.8-3.el6_4, xulrunner-devel-17.0.8-3.el6_4, xulrunner-devel-17.0.8-3.el6_4.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-17.0.8-1.el6_4, xulrunner-17.0.8-3.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-17.0.8-3.el6_4, xulrunner-devel-17.0.8-3.el6_4
Fixes 6 records
Priority HIGH 71
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.41711 · Published 2013-08-07 · Partial fix CWE-20
Priority MEDIUM 50
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow re…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04587 · Published 2013-08-07 · Partial fix
Priority LOW 29
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, whic…
CVSS 2.0MEDIUM 5.4· Network · No auth · Interaction — · EPSS 0.02404 · Published 2013-08-07 · Partial fix CWE-264
Priority LOW 24
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRe…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02091 · Published 2013-08-07 · Partial fix CWE-264
Priority LOW 23
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0162 · Published 2013-08-07 · Partial fix CWE-264
Priority LOW 23
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and hist…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01331 · Published 2013-08-07 · Partial fix CWE-79
THREATIST.IORead the docs