Skip to content
OpenAdvisories
Unscored RHSA-2008:0103 11 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.12-0.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.12-0.10.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:1.5.0.12-9.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:1.5.0.12-9.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:1.5.0.12-9.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:1.5.0.12-9.el5

Vulnerabilities 11

  • Unscored —
    CVE-2008-0412

    The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows r…

  • Unscored —
    CVE-2008-0413

    The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow…

  • Unscored —
    CVE-2008-0415

    Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to exe…

  • Unscored —
    CVE-2008-0416

    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, an…

  • Unscored —
    CVE-2008-0417

    CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the us…

  • Unscored —
    CVE-2008-0418 Public exploit

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before…

  • Unscored —
    CVE-2008-0419

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and caus…

  • Unscored —
    CVE-2008-0420

    modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaM…

  • Unscored —
    CVE-2008-0591

    Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirma…

  • Unscored —
    CVE-2008-0592

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of s…

  • Unscored —
    CVE-2008-0593

    Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property o…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431733
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431739
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431742
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431749
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431756
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0103.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0412
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0412
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0412
  • report
    https://access.redhat.com/security/cve/CVE-2008-0413
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0413
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0413
  • report
    https://access.redhat.com/security/cve/CVE-2008-0415
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0415
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0415
  • report
    https://access.redhat.com/security/cve/CVE-2008-0416
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0416
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0416
  • report
    https://access.redhat.com/security/cve/CVE-2008-0417
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0417
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0417
  • report
    https://access.redhat.com/security/cve/CVE-2008-0418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0418
  • report
    https://access.redhat.com/security/cve/CVE-2008-0419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0419
  • report
    https://access.redhat.com/security/cve/CVE-2008-0420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0420
  • report
    https://access.redhat.com/security/cve/CVE-2008-0591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0591