Skip to content
OpenAdvisories
Unscored RHSA-2010:0112 8 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.0.18-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.0.18-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel-unstable 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.0.18-1.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel-unstable 0:1.9.0.18-1.el5_4

Vulnerabilities 8

  • Unscored —
    CVE-2009-1571

    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderb…

  • Unscored —
    CVE-2009-3988

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read…

  • Unscored —
    CVE-2010-0159

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonk…

  • Unscored —
    CVE-2010-0160

    The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3,…

  • Unscored —
    CVE-2010-0162

    Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the a…

  • Unscored —
    CVE-2010-0167 Public exploit EPSS 10%

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird befo…

  • Unscored —
    CVE-2010-0169

    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5…

  • Unscored —
    CVE-2010-0171

    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonke…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.18
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566047
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566050
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566052
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0112.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1571
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1571
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1571
  • report
    https://access.redhat.com/security/cve/CVE-2009-3988
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3988
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3988
  • report
    https://access.redhat.com/security/cve/CVE-2010-0159
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0159
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0159
  • report
    https://access.redhat.com/security/cve/CVE-2010-0160
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0160
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0160
  • report
    https://access.redhat.com/security/cve/CVE-2010-0162
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0162
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0162
  • report
    https://access.redhat.com/security/cve/CVE-2010-0167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=576698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0167
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0167
  • report
    https://access.redhat.com/security/cve/CVE-2010-0169
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=576694
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0169
  • report
    https://access.redhat.com/security/cve/CVE-2010-0171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=576696
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0171
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0171