Skip to content
OpenAdvisories
Unscored RHSA-2010:0500 12 CVEs

Red Hat Security Advisory: firefox security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.4-8.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.4-8.el4

Vulnerabilities 12

  • Unscored —
    CVE-2008-5913

    The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4…

  • Unscored —
    CVE-2009-5017

    Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote at…

  • Unscored —
    CVE-2010-0182

    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and Se…

  • Unscored —
    CVE-2010-1121

    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to…

  • Unscored —
    CVE-2010-1125

    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, …

  • Unscored —
    CVE-2010-1196

    Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x…

  • Unscored —
    CVE-2010-1197

    Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situat…

  • Unscored —
    CVE-2010-1198

    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5,…

  • Unscored —
    CVE-2010-1199 Public exploit EPSS 11%

    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,…

  • Unscored —
    CVE-2010-1200

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2010-1202

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3…

  • Unscored —
    CVE-2010-1203

    The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://mozilla.com/en-US/firefox/3.6.4/releasenotes/
  • article
    http://mozilla.com/en-US/firefox/3.6/releasenotes/
  • article
    http://mozilla.org/security/known-vulnerabilities/firefox35.html
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=480938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=586580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590816
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590828
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590850
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0500.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5913
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5913
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5913
  • report
    https://access.redhat.com/security/cve/CVE-2009-5017
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=656287
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5017
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5017
  • report
    https://access.redhat.com/security/cve/CVE-2010-0182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0182
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0182
  • report
    https://access.redhat.com/security/cve/CVE-2010-1121
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1121
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1121
  • report
    https://access.redhat.com/security/cve/CVE-2010-1125
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1125
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1125
  • report
    https://access.redhat.com/security/cve/CVE-2010-1196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1196
  • report
    https://access.redhat.com/security/cve/CVE-2010-1197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1197