Skip to content
OpenAdvisories
Unscored RHSA-2009:1162 11 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.12-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.12-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.12-1.el5_3
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.12-1.el5_3

Vulnerabilities 11

  • Unscored —
    CVE-2009-2462

    The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-2463

    Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.…

    nspr Debian
  • Unscored —
    CVE-2009-2464 Public exploit EPSS 13%

    The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and…

  • Unscored —
    CVE-2009-2465

    Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption an…

  • Unscored —
    CVE-2009-2466

    The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2009-2467

    Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application cr…

  • Unscored —
    CVE-2009-2469

    Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an …

    firefox Wolfi
  • Unscored —
    CVE-2009-2470

    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service …

  • Unscored —
    CVE-2009-2471

    The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remot…

  • Unscored —
    CVE-2009-2472

    Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which…

  • Unscored —
    CVE-2009-2664

    The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remot…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.12
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512135
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512146
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512147
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1162.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2462
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2462
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2462
  • report
    https://access.redhat.com/security/cve/CVE-2009-2463
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2463
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2463
  • report
    https://access.redhat.com/security/cve/CVE-2009-2464
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2464
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2464
  • report
    https://access.redhat.com/security/cve/CVE-2009-2465
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2465
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2465
  • report
    https://access.redhat.com/security/cve/CVE-2009-2466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2466
  • report
    https://access.redhat.com/security/cve/CVE-2009-2467
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2467
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2467
  • report
    https://access.redhat.com/security/cve/CVE-2009-2469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2469
  • report
    https://access.redhat.com/security/cve/CVE-2009-2470
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2470
  • report
    https://access.redhat.com/security/cve/CVE-2009-2471
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2471