Skip to content
OpenAdvisories
Unscored RHSA-2005:176 16 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.0.1-1.4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.0.1-1.4.3
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.0.1-1.4.3
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.0.1-1.4.3

Vulnerabilities 16

  • Unscored —
    CVE-2004-1156

    Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting conte…

  • Unscored —
    CVE-2005-0231

    Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, whic…

  • Unscored —
    CVE-2005-0232

    Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plu…

  • Unscored —
    CVE-2005-0233 EPSS 20%

    The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attacke…

  • Unscored —
    CVE-2005-0255

    String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::…

  • Unscored —
    CVE-2005-0527

    Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, a…

  • Unscored —
    CVE-2005-0578

    Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, whic…

  • Unscored —
    CVE-2005-0584

    Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus …

  • Unscored —
    CVE-2005-0585

    Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote m…

  • Unscored —
    CVE-2005-0586

    Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to dow…

  • Unscored —
    CVE-2005-0588

    Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to …

  • Unscored —
    CVE-2005-0589

    The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an…

  • Unscored —
    CVE-2005-0590

    The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows…

  • Unscored —
    CVE-2005-0591

    Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could…

  • Unscored —
    CVE-2005-0592

    Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might all…

  • Unscored —
    CVE-2005-0593

    Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/projects/security/known-vulnerabilities.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=142506
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=144216
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=147402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=147727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=147735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149923
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149929
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149930
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149931
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149934
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149936
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=149939
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_176.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-1156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617383
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1156
  • report
    https://access.redhat.com/security/cve/CVE-2005-0231
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0231
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0231
  • report
    https://access.redhat.com/security/cve/CVE-2005-0232
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0232
  • report
    https://access.redhat.com/security/cve/CVE-2005-0233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617502
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0233
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0233
  • report
    https://access.redhat.com/security/cve/CVE-2005-0255
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617509
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0255
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0255
  • report
    https://access.redhat.com/security/cve/CVE-2005-0527