Skip to content
OpenAdvisories
Unscored RHSA-2009:0436 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.9-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.9-1.el5

Vulnerabilities 12

  • Unscored —
    CVE-2009-0652

    The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbir…

  • Unscored —
    CVE-2009-1302

    The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows…

  • Unscored —
    CVE-2009-1303

    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows rem…

  • Unscored —
    CVE-2009-1304

    The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 all…

  • Unscored —
    CVE-2009-1305

    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows …

  • Unscored —
    CVE-2009-1306

    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Dis…

  • Unscored —
    CVE-2009-1307

    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly imple…

  • Unscored —
    CVE-2009-1308

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote atta…

  • Unscored —
    CVE-2009-1309

    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHt…

  • Unscored —
    CVE-2009-1310

    Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows …

  • Unscored —
    CVE-2009-1311

    Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive infor…

  • Unscored —
    CVE-2009-1312 Public exploit

    Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, w…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.9
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496255
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496274
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0436.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0652
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0652
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0652
  • report
    https://access.redhat.com/security/cve/CVE-2009-1302
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1302
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1302
  • report
    https://access.redhat.com/security/cve/CVE-2009-1303
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1303
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1303
  • report
    https://access.redhat.com/security/cve/CVE-2009-1304
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1304
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1304
  • report
    https://access.redhat.com/security/cve/CVE-2009-1305
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1305
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1305
  • report
    https://access.redhat.com/security/cve/CVE-2009-1306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1306
  • report
    https://access.redhat.com/security/cve/CVE-2009-1307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1307
  • report
    https://access.redhat.com/security/cve/CVE-2009-1308
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1308
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1308