Red Hat Security AdvisoryRHSA-2016:1217
firefox security update
Released 2016-06-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-45.2.0-1.el5_11, firefox-45.2.0-1.el5_11.i386
- Red Hat Enterprise Linux Client (v. 7) firefox-45.2.0-1.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-45.2.0-1.el7_2
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-45.2.0-1.el5_11, firefox-45.2.0-1.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux Server (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux Server (v. 7) firefox-45.2.0-1.el7_2
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-45.2.0-1.el6_8, firefox-45.2.0-1.el6_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-45.2.0-1.el7_2, firefox-45.2.0-1.el7_2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux Workstation (v. 7) firefox-45.2.0-1.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-45.2.0-1.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-45.2.0-1.el7_2
Fixes 6 records
Priority MEDIUM 59
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.23957 · Published 2016-06-13 · Fixed CWE-119
Priority MEDIUM 45
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03873 · Published 2016-06-13 · Fixed CWE-119
Priority MEDIUM 44
Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the textu…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03017 · Published 2016-06-13 · Fixed
Priority MEDIUM 41
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service (UI outage), or conduc…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01347 · Published 2016-06-13 · Fixed CWE-254
Priority LOW 38
Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.02771 · Published 2016-06-13 · Fixed
Priority LOW 33
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02026 · Published 2016-06-13 · Fixed CWE-284
THREATIST.IORead the docs