Red Hat Security AdvisoryRHSA-2015:0265
firefox security update
Released 2015-02-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-31.5.0-1.el5_11, firefox-31.5.0-1.el5_11.i386, firefox-31.5.0-1.el5_11.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) firefox-31.5.0-2.el7_0, xulrunner-31.5.0-1.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-31.5.0-2.el7_0, xulrunner-devel-31.5.0-1.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xulrunner-31.5.0-1.el7_0, xulrunner-devel-31.5.0-1.el7_0
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-31.5.0-1.el5_11, firefox-31.5.0-1.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-31.5.0-2.el7_0, xulrunner-31.5.0-1.el7_0, xulrunner-31.5.0-1.el7_0.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-31.5.0-1.el6_6, firefox-31.5.0-1.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-31.5.0-2.el7_0, firefox-31.5.0-2.el7_0.ppc, xulrunner-31.5.0-1.el7_0 +2
- Red Hat Enterprise Linux Workstation (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-31.5.0-2.el7_0, xulrunner-31.5.0-1.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-31.5.0-1.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-31.5.0-2.el7_0, xulrunner-devel-31.5.0-1.el7_0
Fixes 4 records
Priority MEDIUM 40
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04189 · Published 2015-02-25 · Fixed
Priority LOW 37
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execu…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03811 · Published 2015-02-25 · Fixed
Priority LOW 25
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uni…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02512 · Published 2015-02-25 · Fixed CWE-119
Priority LOW 24
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02217 · Published 2015-02-25 · Fixed CWE-200
THREATIST.IORead the docs