Skip to content
OpenAdvisories
Unscored RHSA-2005:336 3 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.0.2-1.4.1
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.0.2-1.4.1

Vulnerabilities 3

  • Unscored —
    CVE-2005-0399 EPSS 15%

    Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, …

  • Unscored —

    FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hija…

  • Unscored —

    Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firef…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=150877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=151153
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=151714
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_336.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-0399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0399
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0399
  • report
    https://access.redhat.com/security/cve/CVE-2005-0401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617519
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0401
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0401
  • report
    https://access.redhat.com/security/cve/CVE-2005-0402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617521
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0402