Skip to content
OpenAdvisories
Unscored RHSA-2008:0598 2 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as firefox-debuginfo 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es firefox 0:1.5.0.12-0.21.el4
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es firefox-debuginfo 0:1.5.0.12-0.21.el4

Vulnerabilities 2

  • Unscored —

    Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…

  • Unscored —

    Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as reques…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452204
  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454697
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0598.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2785
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2785
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2785
  • report
    https://access.redhat.com/security/cve/CVE-2008-2933
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2933
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2933