Skip to content
OpenAdvisories
Unscored RHSA-2008:1036 11 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 66

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr-debuginfo 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr-devel 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-debuginfo 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-devel 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr-debuginfo 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr-devel 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.5-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-debuginfo 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-devel 0:4.7.3-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.2.0-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.2.0-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client nspr 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nspr-debuginfo 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-debuginfo 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-devel 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server nspr 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspr-debuginfo 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspr-devel 0:4.7.3-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.2.0-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.5-1.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.5-1.el5_2

Vulnerabilities 11

  • Unscored —
    CVE-2008-5500

    The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and Sea…

  • Unscored —
    CVE-2008-5501

    The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14…

  • Unscored —
    CVE-2008-5502

    The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14…

  • Unscored —
    CVE-2008-5505

    Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist a…

  • Unscored —
    CVE-2008-5506

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5507

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5508

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5510

    The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMon…

  • Unscored —
    CVE-2008-5511

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5512

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x befor…

  • Unscored —
    CVE-2008-5513

    Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 al…

References

  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.5
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476269
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476274
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476287
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476289
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1036.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5500
  • report
    https://access.redhat.com/security/cve/CVE-2008-5501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5501
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5501
  • report
    https://access.redhat.com/security/cve/CVE-2008-5502
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5502
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5502
  • report
    https://access.redhat.com/security/cve/CVE-2008-5505
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5505
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5505
  • report
    https://access.redhat.com/security/cve/CVE-2008-5506
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5506
  • report
    https://access.redhat.com/security/cve/CVE-2008-5507
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5507
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5507
  • report
    https://access.redhat.com/security/cve/CVE-2008-5508
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5508
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5508
  • report
    https://access.redhat.com/security/cve/CVE-2008-5510
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5510
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5510
  • report
    https://access.redhat.com/security/cve/CVE-2008-5511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5511