Skip to content
OpenAdvisories
Unscored RHSA-2010:0501 12 CVEs

Red Hat Security Advisory: firefox security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 51

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client devhelp 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client devhelp-debuginfo 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client esc 0:1.1.0-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client esc-debuginfo 0:1.1.0-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.6.4-8.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.6.4-8.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-extras 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-extras-debuginfo 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-gtkhtml2 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-gtkmozembed 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-gtkspell 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client gnome-python2-libegg 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client totem 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client totem-debuginfo 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client totem-mozplugin 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-devel 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp 0:2.16.0-26.el5
Red Hat · RHEL 5 enterprise_linux:5::client yelp-debuginfo 0:2.16.0-26.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-debuginfo 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation devhelp-devel 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation totem 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation totem-debuginfo 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation totem-devel 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-debuginfo 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server devhelp-devel 0:0.12-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server esc 0:1.1.0-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server esc-debuginfo 0:1.1.0-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.4-8.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.4-8.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-extras 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-extras-debuginfo 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-gtkhtml2 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-gtkmozembed 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-gtkspell 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server gnome-python2-libegg 0:2.14.2-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server totem 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server totem-debuginfo 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server totem-devel 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server totem-mozplugin 0:2.16.7-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.4-10.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp 0:2.16.0-26.el5
Red Hat · RHEL 5 enterprise_linux:5::server yelp-debuginfo 0:2.16.0-26.el5

Vulnerabilities 12

  • Unscored —
    CVE-2008-5913

    The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4…

  • Unscored —
    CVE-2009-5017

    Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote at…

  • Unscored —
    CVE-2010-0182

    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and Se…

  • Unscored —
    CVE-2010-1121

    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to…

  • Unscored —
    CVE-2010-1125

    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, …

  • Unscored —
    CVE-2010-1196

    Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x…

  • Unscored —
    CVE-2010-1197

    Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situat…

  • Unscored —
    CVE-2010-1198

    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5,…

  • Unscored —
    CVE-2010-1199 Public exploit EPSS 11%

    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,…

  • Unscored —
    CVE-2010-1200

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2010-1202

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3…

  • Unscored —
    CVE-2010-1203

    The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://mozilla.com/en-US/firefox/3.6.4/releasenotes/
  • article
    http://mozilla.com/en-US/firefox/3.6/releasenotes/
  • article
    http://mozilla.org/security/known-vulnerabilities/firefox35.html
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=480938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=586580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590816
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590828
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590850
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0501.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5913
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5913
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5913
  • report
    https://access.redhat.com/security/cve/CVE-2009-5017
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=656287
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5017
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5017
  • report
    https://access.redhat.com/security/cve/CVE-2010-0182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0182
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0182
  • report
    https://access.redhat.com/security/cve/CVE-2010-1121
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1121
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1121
  • report
    https://access.redhat.com/security/cve/CVE-2010-1125
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1125
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1125
  • report
    https://access.redhat.com/security/cve/CVE-2010-1196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1196
  • report
    https://access.redhat.com/security/cve/CVE-2010-1197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1197