Red Hat Security Advisory: Mozilla security update

Fixed packages 12

Vulnerabilities 8

• Unscored —
  CVE-2005-0989 Public exploit EPSS 10%

  The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Nets…

  Apr 6, 2005
• Unscored —
  CVE-2005-1153

  Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrar…

  Apr 18, 2005
• Unscored —
  CVE-2005-1154

  Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domain…

  Apr 18, 2005
• Unscored —
  CVE-2005-1155

  The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arb…

  Apr 18, 2005
• Unscored —
  CVE-2005-1156

  Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script …

  Apr 18, 2005
• Unscored —
  CVE-2005-1157

  Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search p…

  Apr 18, 2005
• Unscored —
  CVE-2005-1159

  The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7…

  Apr 18, 2005
• Unscored —
  CVE-2005-1160

  The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain …

  Apr 18, 2005

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.7
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=155116
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_386.json
• report
  https://access.redhat.com/security/cve/CVE-2005-0989
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617596
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-0989
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-0989
• report
  https://access.redhat.com/security/cve/CVE-2005-1153
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617605
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1153
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1153
• report
  https://access.redhat.com/security/cve/CVE-2005-1154
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617606
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1154
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1154
• report
  https://access.redhat.com/security/cve/CVE-2005-1155
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617607
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1155
• report
  https://access.redhat.com/security/cve/CVE-2005-1156
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617608
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1156
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1156
• report
  https://access.redhat.com/security/cve/CVE-2005-1157
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617609
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1157
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1157
• report
  https://access.redhat.com/security/cve/CVE-2005-1159
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617611
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1159
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1159
• report
  https://access.redhat.com/security/cve/CVE-2005-1160
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1617612
• advisory
  https://www.cve.org/CVERecord?id=CVE-2005-1160
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2005-1160