Red Hat Security AdvisoryRHSA-2014:1635
firefox security update
Released 2014-10-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-31.2.0-3.el5_11, firefox-31.2.0-3.el5_11.i386, firefox-31.2.0-3.el5_11.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) firefox-31.2.0-3.el7_0, xulrunner-31.2.0-1.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-31.2.0-3.el7_0, xulrunner-devel-31.2.0-1.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xulrunner-31.2.0-1.el7_0, xulrunner-devel-31.2.0-1.el7_0
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-31.2.0-3.el5_11, firefox-31.2.0-3.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-31.2.0-3.el7_0, xulrunner-31.2.0-1.el7_0, xulrunner-31.2.0-1.el7_0.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-31.2.0-3.el6_6, firefox-31.2.0-3.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-31.2.0-3.el7_0, firefox-31.2.0-3.el7_0.ppc, xulrunner-31.2.0-1.el7_0 +2
- Red Hat Enterprise Linux Workstation (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-31.2.0-3.el7_0, xulrunner-31.2.0-1.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-31.2.0-3.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-31.2.0-3.el7_0, xulrunner-devel-31.2.0-1.el7_0
Fixes 6 records
Priority MEDIUM 41
Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascadi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05087 · Published 2014-10-15 · Partial fix CWE-119
Priority MEDIUM 40
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is im…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04055 · Published 2014-10-15 · Fixed
Priority MEDIUM 40
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or pos…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0402 · Published 2014-10-15 · Fixed CWE-119
Priority MEDIUM 40
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corrup…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03972 · Published 2014-10-15 · Fixed
Priority LOW 34
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain s…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02896 · Published 2014-10-15 · Fixed
Priority LOW 28
The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sens…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02864 · Published 2014-10-15 · Fixed
THREATIST.IORead the docs