Red Hat Security AdvisoryRHSA-2014:1919
firefox security update
Released 2014-12-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-31.3.0-4.el5_11, firefox-31.3.0-4.el5_11.i386, firefox-31.3.0-4.el5_11.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) firefox-31.3.0-3.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-31.3.0-3.el7_0
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-31.3.0-4.el5_11, firefox-31.3.0-4.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-31.3.0-3.el7_0
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-31.3.0-3.el6_6, firefox-31.3.0-3.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-31.3.0-3.el7_0, firefox-31.3.0-3.el7_0.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-31.3.0-3.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-31.3.0-3.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-31.3.0-3.el7_0
Fixes 5 records
Priority LOW 37
Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execut…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04052 · Published 2014-12-11 · Fixed CWE-119
Priority LOW 36
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLay…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03406 · Published 2014-12-11 · Partial fix CWE-20
Priority LOW 36
Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to exe…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03377 · Published 2014-12-11 · Fixed
Priority LOW 36
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of serv…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03546 · Published 2014-12-11 · Fixed CWE-20
Priority LOW 23
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01683 · Published 2014-12-11 · Partial fix CWE-20
THREATIST.IORead the docs