Skip to content
OpenAdvisories
Unscored RHSA-2006:0610 24 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.5-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.5-0.el4.1

Vulnerabilities 24

  • Unscored —
    CVE-2006-2776

    Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object…

    thunderbird Debian
  • Unscored —
    CVE-2006-2778

    The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbit…

    thunderbird Debian
  • Unscored —
    CVE-2006-2779

    Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly…

    thunderbird Debian
  • Unscored —
    CVE-2006-2780

    Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service…

    thunderbird Debian
  • Unscored —
    CVE-2006-2782

    Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitr…

  • Unscored —
    CVE-2006-2783

    Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the pag…

    thunderbird Debian
  • Unscored —
    CVE-2006-2784

    The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privil…

  • Unscored —
    CVE-2006-2785

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inj…

  • Unscored —
    CVE-2006-2786

    HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy s…

    thunderbird Debian
  • Unscored —
    CVE-2006-2787

    EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascri…

    thunderbird Debian
  • Unscored —
    CVE-2006-2788

    Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denia…

  • Unscored —
    CVE-2006-3113

    Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to c…

    thunderbird Debian
  • Unscored —
    CVE-2006-3677 Public exploit EPSS 80%

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chan…

  • Unscored —
    CVE-2006-3801

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame…

    thunderbird Debian
  • Unscored —
    CVE-2006-3802

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijac…

    thunderbird Debian
  • Unscored —
    CVE-2006-3803

    Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, …

    thunderbird Debian
  • Unscored —
    CVE-2006-3805

    The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might a…

    thunderbird Debian
  • Unscored —
    CVE-2006-3806

    Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and …

    thunderbird Debian
  • Unscored —
    CVE-2006-3807

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execu…

    thunderbird Debian
  • Unscored —
    CVE-2006-3808

    Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code …

    thunderbird Debian
  • Unscored —
    CVE-2006-3809

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the Universa…

    thunderbird Debian
  • Unscored —
    CVE-2006-3810

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonk…

    thunderbird Debian
  • Unscored —
    CVE-2006-3811

    Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allo…

    thunderbird Debian
  • Unscored —
    CVE-2006-3812

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to refer…

    thunderbird Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=193895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=196973
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=200168
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0610.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2776
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2776
  • report
    https://access.redhat.com/security/cve/CVE-2006-2778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2778
  • report
    https://access.redhat.com/security/cve/CVE-2006-2779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2779
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2779
  • report
    https://access.redhat.com/security/cve/CVE-2006-2780
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2780
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2780
  • report
    https://access.redhat.com/security/cve/CVE-2006-2782
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618116
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2782
  • report
    https://access.redhat.com/security/cve/CVE-2006-2783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618117
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2783
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2783
  • report
    https://access.redhat.com/security/cve/CVE-2006-2784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2784
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2784
  • report
    https://access.redhat.com/security/cve/CVE-2006-2785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618119
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2785
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2785
  • report
    https://access.redhat.com/security/cve/CVE-2006-2786
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618120