Skip to content
OpenAdvisories
Unscored RHSA-2008:0597 3 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client devhelp 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client devhelp-debuginfo 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nspluginwrapper 0:0.9.91.5-22.el5
Red Hat · RHEL 5 enterprise_linux:5::client nspluginwrapper-debuginfo 0:0.9.91.5-22.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp 0:2.16.0-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp-debuginfo 0:2.16.0-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-debuginfo 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-devel 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-debuginfo 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-devel 0:0.12-18.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspluginwrapper 0:0.9.91.5-22.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspluginwrapper-debuginfo 0:0.9.91.5-22.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp 0:2.16.0-20.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp-debuginfo 0:2.16.0-20.el5

Vulnerabilities 3

  • Unscored —
    CVE-2008-2785

    Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…

  • Unscored —
    CVE-2008-2933

    Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as reques…

  • Unscored —
    CVE-2008-3198

    Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unsp…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454697
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0597.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2785
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2785
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2785
  • report
    https://access.redhat.com/security/cve/CVE-2008-2933
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2933
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2933
  • report
    https://access.redhat.com/security/cve/CVE-2008-3198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618332
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3198
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3198