Skip to content
OpenAdvisories
Unscored RHSA-2009:1530 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 42

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::as nspr-debuginfo 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::as nspr-devel 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-debuginfo 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-devel 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es nspr-debuginfo 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::es nspr-devel 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.15-3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-debuginfo 0:4.7.6-1.el4_8
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-devel 0:4.7.6-1.el4_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client nspr 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client nspr-debuginfo 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-debuginfo 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-devel 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr-debuginfo 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server nspr-devel 0:4.7.6-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.15-3.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.15-3.el5_4

Vulnerabilities 12

  • Unscored —
    CVE-2009-0689 Public exploit EPSS 29%

    Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…

    mono nspr Debian
  • Unscored —
    CVE-2009-1563 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Ce…

  • Unscored —
    CVE-2009-3274

    Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux …

  • Unscored —
    CVE-2009-3370

    Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse an…

  • Unscored —
    CVE-2009-3372

    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-3373 Public exploit EPSS 16%

    Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonk…

  • Unscored —
    CVE-2009-3374

    The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x b…

  • Unscored —
    CVE-2009-3375

    content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-…

  • Unscored —
    CVE-2009-3376

    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-lef…

  • Unscored —
    CVE-2009-3380

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.…

  • Unscored —
    CVE-2009-3382 Public exploit EPSS 11%

    layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly ha…

  • Unscored —
    CVE-2009-3384

    Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to exec…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.15
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=524815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530569
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1530.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=539784
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0689
  • report
    https://access.redhat.com/security/cve/CVE-2009-1563
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1563
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1563
  • report
    https://access.redhat.com/security/cve/CVE-2009-3274
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3274
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3274
  • report
    https://access.redhat.com/security/cve/CVE-2009-3370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3370
  • report
    https://access.redhat.com/security/cve/CVE-2009-3372
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3372
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3372
  • report
    https://access.redhat.com/security/cve/CVE-2009-3373
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3373
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3373
  • report
    https://access.redhat.com/security/cve/CVE-2009-3374
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3374
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3374
  • report
    https://access.redhat.com/security/cve/CVE-2009-3375
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3375
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3375
  • report
    https://access.redhat.com/security/cve/CVE-2009-3376