Skip to content
OpenAdvisories
Unscored RHSA-2008:0879 10 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 46

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.2-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.2-3.el4
Red Hat · RHEL 5 enterprise_linux:5::client devhelp 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client devhelp-debuginfo 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.2-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.2-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp 0:2.16.0-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp-debuginfo 0:2.16.0-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-debuginfo 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-devel 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-debuginfo 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-devel 0:0.12-19.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.2-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.2-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.1.1-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.2-5.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp 0:2.16.0-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp-debuginfo 0:2.16.0-21.el5

Vulnerabilities 10

  • Unscored —
    CVE-2008-3837

    Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers…

  • Unscored —
    CVE-2008-4058

    The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMo…

  • Unscored —
    CVE-2008-4060

    Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  • Unscored —
    CVE-2008-4061

    Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.…

  • Unscored —
    CVE-2008-4062

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.…

  • Unscored —
    CVE-2008-4063

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  • Unscored —
    CVE-2008-4064

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  • Unscored —
    CVE-2008-4065

    Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  • Unscored —
    CVE-2008-4067

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  • Unscored —
    CVE-2008-4068

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

References

  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.2
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463190
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463203
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463248
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0879.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3837
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3837
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3837
  • report
    https://access.redhat.com/security/cve/CVE-2008-4058
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4058
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4058
  • report
    https://access.redhat.com/security/cve/CVE-2008-4060
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4060
  • report
    https://access.redhat.com/security/cve/CVE-2008-4061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4061
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4061
  • report
    https://access.redhat.com/security/cve/CVE-2008-4062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4062
  • report
    https://access.redhat.com/security/cve/CVE-2008-4063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4063
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4063
  • report
    https://access.redhat.com/security/cve/CVE-2008-4064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4064
  • report
    https://access.redhat.com/security/cve/CVE-2008-4065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4065
  • report
    https://access.redhat.com/security/cve/CVE-2008-4067
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4067
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4067