Skip to content
OpenAdvisories
Unscored RHSA-2009:1430 10 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 42

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::as nspr-debuginfo 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::as nspr-devel 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-debuginfo 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-devel 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es nspr-debuginfo 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es nspr-devel 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.14-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-debuginfo 0:4.7.5-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-devel 0:4.7.5-1.el4_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client nspr 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client nspr-debuginfo 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-debuginfo 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-devel 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr-debuginfo 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr-devel 0:4.7.5-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.14-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.14-1.el5_4

Vulnerabilities 10

  • Unscored —
    CVE-2009-2654 Public exploit

    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly c…

  • Unscored —
    CVE-2009-3070

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to c…

  • Unscored —
    CVE-2009-3071

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, al…

  • Unscored —
    CVE-2009-3072

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thu…

  • Unscored —
    CVE-2009-3074

    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a …

  • Unscored —
    CVE-2009-3075

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, …

  • Unscored —
    CVE-2009-3076 Public exploit

    Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and …

  • Unscored —
    CVE-2009-3077

    Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColum…

  • Unscored —
    CVE-2009-3078

    Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to tr…

  • Unscored —
    CVE-2009-3079

    Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.14
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521311
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521687
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521695
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1430.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2654
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2654
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2654
  • report
    https://access.redhat.com/security/cve/CVE-2009-3070
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3070
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3070
  • report
    https://access.redhat.com/security/cve/CVE-2009-3071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3071
  • report
    https://access.redhat.com/security/cve/CVE-2009-3072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3072
  • report
    https://access.redhat.com/security/cve/CVE-2009-3074
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3074
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3074
  • report
    https://access.redhat.com/security/cve/CVE-2009-3075
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3075
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3075
  • report
    https://access.redhat.com/security/cve/CVE-2009-3076
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3076
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3076
  • report
    https://access.redhat.com/security/cve/CVE-2009-3077
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3077
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3077
  • report
    https://access.redhat.com/security/cve/CVE-2009-3078
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3078