Skip to content
OpenAdvisories
Unscored RHSA-2009:0315 8 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.7-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.7-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.7-1.el5

Vulnerabilities 8

  • Unscored —
    CVE-2009-0040

    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applicatio…

  • Unscored —
    CVE-2009-0771

    The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote atta…

  • Unscored —
    CVE-2009-0772

    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows rem…

  • Unscored —
    CVE-2009-0773

    The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote …

  • Unscored —
    CVE-2009-0774

    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows rem…

  • Unscored —
    CVE-2009-0775

    Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 all…

  • Unscored —
    CVE-2009-0776

    nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote a…

  • Unscored —
    CVE-2009-0777

    Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.7
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488273
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488287
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488292
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0315.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0040
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0040
  • report
    https://access.redhat.com/security/cve/CVE-2009-0771
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0771
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0771
  • report
    https://access.redhat.com/security/cve/CVE-2009-0772
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0772
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0772
  • report
    https://access.redhat.com/security/cve/CVE-2009-0773
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0773
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0773
  • report
    https://access.redhat.com/security/cve/CVE-2009-0774
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0774
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0774
  • report
    https://access.redhat.com/security/cve/CVE-2009-0775
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0775
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0775
  • report
    https://access.redhat.com/security/cve/CVE-2009-0776
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0776
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0776
  • report
    https://access.redhat.com/security/cve/CVE-2009-0777
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0777
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0777