Skip to content
OpenAdvisories
Unscored RHSA-2007:0724 7 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:1.5.0.12-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:1.5.0.12-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:1.5.0.12-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:1.5.0.12-3.el5

Vulnerabilities 7

  • Unscored —
    CVE-2007-3089

    Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or…

  • Unscored —
    CVE-2007-3656

    Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyc…

  • Unscored —
    CVE-2007-3734

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0…

  • Unscored —
    CVE-2007-3735

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before …

  • Unscored —
    CVE-2007-3736

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3737

    Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an e…

  • Unscored —
    CVE-2007-3738

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248518
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0724.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-3089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618309
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3089
  • report
    https://access.redhat.com/security/cve/CVE-2007-3656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618317
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3656
  • report
    https://access.redhat.com/security/cve/CVE-2007-3734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618318
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3734
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3734
  • report
    https://access.redhat.com/security/cve/CVE-2007-3735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618319
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3735
  • report
    https://access.redhat.com/security/cve/CVE-2007-3736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618320
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3736
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3736
  • report
    https://access.redhat.com/security/cve/CVE-2007-3737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618321
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3737
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3737
  • report
    https://access.redhat.com/security/cve/CVE-2007-3738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618322
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3738