Red Hat Security AdvisoryRHSA-2015:0766
firefox security update
Released 2015-04-01 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-31.6.0-2.el5_11, firefox-31.6.0-2.el5_11.i386, firefox-31.6.0-2.el5_11.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) firefox-31.6.0-2.el7_1, xulrunner-31.6.0-2.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-31.6.0-2.el7_1, xulrunner-devel-31.6.0-2.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xulrunner-31.6.0-2.el7_1, xulrunner-devel-31.6.0-2.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-31.6.0-2.el5_11, firefox-31.6.0-2.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-31.6.0-2.ael7b_1, firefox-31.6.0-2.el7_1, xulrunner-31.6.0-2.ael7b_1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-31.6.0-2.el6_6, firefox-31.6.0-2.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-31.6.0-2.el7_1, firefox-31.6.0-2.el7_1.ppc, xulrunner-31.6.0-2.el7_1 +3
- Red Hat Enterprise Linux Workstation (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-31.6.0-2.el7_1, xulrunner-31.6.0-2.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-31.6.0-2.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-31.6.0-2.el7_1, xulrunner-devel-31.6.0-2.el7_1
Fixes 5 records
Priority MEDIUM 59
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.65529 · Published 2015-04-01 · Fixed CWE-264
Priority MEDIUM 40
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04113 · Published 2015-04-01 · Fixed
Priority LOW 38
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors invo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02821 · Published 2015-04-01 · Fixed CWE-264
Priority LOW 32
The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, whic…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01021 · Published 2015-04-01 · Fixed CWE-352
Priority LOW 31
Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows re…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.05261 · Published 2015-04-01 · Fixed
THREATIST.IORead the docs