Skip to content
OpenAdvisories
Unscored RHSA-2007:0979 9 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.12-0.7.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.12-0.7.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:1.5.0.12-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:1.5.0.12-6.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:1.5.0.12-6.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:1.5.0.12-6.el5

Vulnerabilities 9

  • Unscored —
    CVE-2007-1095

    Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which…

  • Unscored —
    CVE-2007-2292 EPSS 13%

    CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey befo…

  • Unscored —
    CVE-2007-3511

    The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and …

  • Unscored —
    CVE-2007-3844 Public exploit

    Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduc…

  • Unscored —
    CVE-2007-5334

    Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup lan…

  • Unscored —
    CVE-2007-5337

    Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might …

  • Unscored —
    CVE-2007-5338

    Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with u…

  • Unscored —
    CVE-2007-5339

    Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allo…

  • Unscored —
    CVE-2007-5340

    Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and Se…

References

  • article
    http://en.wikipedia.org/wiki/HTTP_response_splitting
  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=246248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=333991
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0979.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-1095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618294
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1095
  • report
    https://access.redhat.com/security/cve/CVE-2007-2292
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618308
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2292
  • report
    https://access.redhat.com/security/cve/CVE-2007-3511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3511
  • report
    https://access.redhat.com/security/cve/CVE-2007-3844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250648
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3844
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3844
  • report
    https://access.redhat.com/security/cve/CVE-2007-5334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5334
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5334
  • report
    https://access.redhat.com/security/cve/CVE-2007-5337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618325
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5337
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5337
  • report
    https://access.redhat.com/security/cve/CVE-2007-5338
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618326
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5338
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5338
  • report
    https://access.redhat.com/security/cve/CVE-2007-5339
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618328
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5339
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5339
  • report
    https://access.redhat.com/security/cve/CVE-2007-5340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618329