Skip to content
OpenAdvisories
Unscored RHSA-2009:0256 7 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 50

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-tools 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-tools 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-tools 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.2.0-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-tools 0:3.12.2.0-3.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.2.0-4.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.6-1.el5

Vulnerabilities 7

  • Unscored —
    CVE-2009-0352

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey be…

  • Unscored —
    CVE-2009-0353

    Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15…

  • Unscored —
    CVE-2009-0354

    Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass th…

  • Unscored —
    CVE-2009-0355

    components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements …

  • Unscored —
    CVE-2009-0356

    Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .…

  • Unscored —
    CVE-2009-0357

    Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-…

  • Unscored —
    CVE-2009-0358

    Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.6
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=456849
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=483150
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0256.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0352
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0352
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0352
  • report
    https://access.redhat.com/security/cve/CVE-2009-0353
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0353
  • report
    https://access.redhat.com/security/cve/CVE-2009-0354
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0354
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0354
  • report
    https://access.redhat.com/security/cve/CVE-2009-0355
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0355
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0355
  • report
    https://access.redhat.com/security/cve/CVE-2009-0356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0356
  • report
    https://access.redhat.com/security/cve/CVE-2009-0357
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0357
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0357
  • report
    https://access.redhat.com/security/cve/CVE-2009-0358
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0358
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0358