Skip to content
OpenAdvisories
Unscored RHSA-2008:0549 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.12-0.19.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.12-0.19.el4

Vulnerabilities 12

  • Unscored —
    CVE-2008-2798 EPSS 14%

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2799

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2800

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and…

  • Unscored —
    CVE-2008-2801

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote …

  • Unscored —
    CVE-2008-2802

    Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers t…

  • Unscored —
    CVE-2008-2803

    The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and…

  • Unscored —
    CVE-2008-2805

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary loc…

  • Unscored —
    CVE-2008-2807

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an a…

  • Unscored —
    CVE-2008-2808

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory li…

  • Unscored —
    CVE-2008-2809

    Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…

  • Unscored —
    CVE-2008-2810

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut fi…

  • Unscored —
    CVE-2008-2811

    The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey bef…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453007
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0549.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2798
  • report
    https://access.redhat.com/security/cve/CVE-2008-2799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2799
  • report
    https://access.redhat.com/security/cve/CVE-2008-2800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2800
  • report
    https://access.redhat.com/security/cve/CVE-2008-2801
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2801
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2801
  • report
    https://access.redhat.com/security/cve/CVE-2008-2802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2802
  • report
    https://access.redhat.com/security/cve/CVE-2008-2803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2803
  • report
    https://access.redhat.com/security/cve/CVE-2008-2805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2805
  • report
    https://access.redhat.com/security/cve/CVE-2008-2807
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2807
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2807
  • report
    https://access.redhat.com/security/cve/CVE-2008-2808