Red Hat Security AdvisoryRHSA-2013:1268
firefox security update
Released 2013-09-17 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-17.0.9-1.el5_9, firefox-17.0.9-1.el5_9.i386, firefox-17.0.9-1.el5_9.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) firefox-17.0.9-1.el6_4, xulrunner-17.0.9-1.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-17.0.9-1.el6_4, xulrunner-devel-17.0.9-1.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-17.0.9-1.el6_4, xulrunner-17.0.9-1.el6_4, xulrunner-devel-17.0.9-1.el6_4
- Red Hat Enterprise Linux Server (v. 6) firefox-17.0.9-1.el6_4, firefox-17.0.9-1.el6_4.ppc, xulrunner-17.0.9-1.el6_4 +1
- Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-17.0.9-1.el6_4, xulrunner-devel-17.0.9-1.el6_4, xulrunner-devel-17.0.9-1.el6_4.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-17.0.9-1.el6_4, xulrunner-17.0.9-1.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-17.0.9-1.el6_4, xulrunner-devel-17.0.9-1.el6_4
Fixes 8 records
Priority MEDIUM 52
Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08894 · Published 2013-09-18 · Partial fix CWE-119
Priority MEDIUM 51
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05391 · Published 2013-09-18 · Partial fix CWE-119
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05437 · Published 2013-09-18 · Partial fix CWE-119
Priority MEDIUM 49
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x befo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05693 · Published 2013-09-18 · Partial fix CWE-399
Priority MEDIUM 48
Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey b…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04731 · Published 2013-09-18 · Partial fix CWE-20
Priority LOW 37
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with com…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04013 · Published 2013-09-18 · Partial fix CWE-119
Priority LOW 34
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, w…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02251 · Published 2013-09-18 · Partial fix CWE-119
Priority LOW 28
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined ge…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02932 · Published 2013-09-18 · Partial fix CWE-264
THREATIST.IORead the docs