Skip to content
OpenAdvisories
Unscored RHSA-2008:0978 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 58

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.4-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.1.1-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.1.1-3.el4
Red Hat · RHEL 5 enterprise_linux:5::client devhelp 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client devhelp-debuginfo 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp 0:2.16.0-22.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp-debuginfo 0:2.16.0-22.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-debuginfo 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-devel 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-debuginfo 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-devel 0:0.12-20.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.1.1-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.4-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp 0:2.16.0-22.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp-debuginfo 0:2.16.0-22.el5

Vulnerabilities 12

  • Unscored —
    CVE-2008-0017

    The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and…

  • Unscored —
    CVE-2008-5014

    jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMo…

  • Unscored —
    CVE-2008-5015

    Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a ch…

  • Unscored —
    CVE-2008-5016

    The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13…

  • Unscored —
    CVE-2008-5017

    Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before…

  • Unscored —
    CVE-2008-5018

    The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18…

  • Unscored —
    CVE-2008-5019

    The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to viol…

  • Unscored —
    CVE-2008-5021

    nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey…

  • Unscored —
    CVE-2008-5022

    The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird…

  • Unscored —
    CVE-2008-5023

    Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypas…

  • Unscored —
    CVE-2008-5024

    Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x befor…

  • Unscored —
    CVE-2008-5052

    The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x befo…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470889
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470898
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470902
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0978.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0017
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0017
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0017
  • report
    https://access.redhat.com/security/cve/CVE-2008-5014
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5014
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5014
  • report
    https://access.redhat.com/security/cve/CVE-2008-5015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5015
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5015
  • report
    https://access.redhat.com/security/cve/CVE-2008-5016
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5016
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5016
  • report
    https://access.redhat.com/security/cve/CVE-2008-5017
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5017
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5017
  • report
    https://access.redhat.com/security/cve/CVE-2008-5018
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5018
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5018
  • report
    https://access.redhat.com/security/cve/CVE-2008-5019
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5019
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5019
  • report
    https://access.redhat.com/security/cve/CVE-2008-5021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5021
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5021