Skip to content
OpenAdvisories
Unscored RHSA-2005:335 9 CVEs

Red Hat Security Advisory: mozilla security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as devhelp 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::as devhelp-debuginfo 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::as devhelp-devel 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::as evolution 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::as evolution-debuginfo 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::as evolution-devel 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp-debuginfo 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp-devel 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop evolution 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::desktop evolution-debuginfo 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::desktop evolution-devel 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::es devhelp 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::es devhelp-debuginfo 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::es devhelp-devel 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::es evolution 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::es evolution-debuginfo 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::es evolution-devel 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp-debuginfo 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp-devel 0:0.9.2-2.4.3
Red Hat · RHEL 4 enterprise_linux:4::ws evolution 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::ws evolution-debuginfo 0:2.0.2-14
Red Hat · RHEL 4 enterprise_linux:4::ws evolution-devel 0:2.0.2-14

Vulnerabilities 9

  • Unscored —
    CVE-2004-1380 Public exploit

    Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow r…

  • Unscored —

    Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter …

  • Unscored —

    Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with worl…

  • Unscored —

    Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a …

  • Unscored —

    Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secu…

  • Unscored —

    Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Java…

  • Unscored —

    Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews pre…

  • Unscored —
    CVE-2005-0399 EPSS 15%

    Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, …

  • Unscored —

    FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hija…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=142508
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=144228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=146188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=147397
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=150866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=151730
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_335.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-1380
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1380
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1380
  • report
    https://access.redhat.com/security/cve/CVE-2005-0141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0141
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0141
  • report
    https://access.redhat.com/security/cve/CVE-2005-0142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0142
  • report
    https://access.redhat.com/security/cve/CVE-2005-0143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617471
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0143
  • report
    https://access.redhat.com/security/cve/CVE-2005-0144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617472
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0144
  • report
    https://access.redhat.com/security/cve/CVE-2005-0146
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0146
  • report
    https://access.redhat.com/security/cve/CVE-2005-0149
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617475
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0149
  • report
    https://access.redhat.com/security/cve/CVE-2005-0399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0399