Skip to content
OpenAdvisories
Unscored RHSA-2008:0569 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client devhelp 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::client devhelp-debuginfo 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp 0:2.16.0-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp-debuginfo 0:2.16.0-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-debuginfo 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-devel 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-debuginfo 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-devel 0:0.12-17.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp 0:2.16.0-19.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp-debuginfo 0:2.16.0-19.el5

Vulnerabilities 12

  • Unscored —
    CVE-2008-2798 EPSS 14%

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2799

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2800

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and…

  • Unscored —
    CVE-2008-2801

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote …

  • Unscored —
    CVE-2008-2802

    Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers t…

  • Unscored —
    CVE-2008-2803

    The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and…

  • Unscored —
    CVE-2008-2805

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary loc…

  • Unscored —
    CVE-2008-2807

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an a…

  • Unscored —
    CVE-2008-2808

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory li…

  • Unscored —
    CVE-2008-2809

    Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…

  • Unscored —
    CVE-2008-2810

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut fi…

  • Unscored —
    CVE-2008-2811

    The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey bef…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453007
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0569.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2798
  • report
    https://access.redhat.com/security/cve/CVE-2008-2799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2799
  • report
    https://access.redhat.com/security/cve/CVE-2008-2800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2800
  • report
    https://access.redhat.com/security/cve/CVE-2008-2801
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2801
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2801
  • report
    https://access.redhat.com/security/cve/CVE-2008-2802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2802
  • report
    https://access.redhat.com/security/cve/CVE-2008-2803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2803
  • report
    https://access.redhat.com/security/cve/CVE-2008-2805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2805
  • report
    https://access.redhat.com/security/cve/CVE-2008-2807
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2807
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2807
  • report
    https://access.redhat.com/security/cve/CVE-2008-2808