Skip to content
OpenAdvisories
Unscored RHSA-2009:1095 11 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.11-4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.11-4.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.11-2.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.11-2.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.11-2.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.11-2.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.11-3.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.11-3.el5_3

Vulnerabilities 11

  • Unscored —
    CVE-2009-1392

    The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows …

  • Unscored —
    CVE-2009-1832

    Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause…

  • Unscored —
    CVE-2009-1833

    The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows…

  • Unscored —
    CVE-2009-1834 Public exploit

    Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey befo…

  • Unscored —
    CVE-2009-1835

    Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located …

  • Unscored —
    CVE-2009-1836

    Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to det…

  • Unscored —
    CVE-2009-1837

    Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozil…

  • Unscored —
    CVE-2009-1838

    The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey befo…

  • Unscored —
    CVE-2009-1839 Public exploit

    Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, whi…

  • Unscored —
    CVE-2009-1840

    Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into…

  • Unscored —
    CVE-2009-1841

    js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.11
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=488570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503569
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503579
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503583
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1095.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1392
  • report
    https://access.redhat.com/security/cve/CVE-2009-1832
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1832
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1832
  • report
    https://access.redhat.com/security/cve/CVE-2009-1833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1833
  • report
    https://access.redhat.com/security/cve/CVE-2009-1834
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1834
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1834
  • report
    https://access.redhat.com/security/cve/CVE-2009-1835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1835
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1835
  • report
    https://access.redhat.com/security/cve/CVE-2009-1836
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1836
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1836
  • report
    https://access.redhat.com/security/cve/CVE-2009-1837
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1837
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1837
  • report
    https://access.redhat.com/security/cve/CVE-2009-1838
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1838
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1838