Skip to content
OpenAdvisories
Unscored RHSA-2010:0547 16 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.7-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.7-2.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.6.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.6.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-devel 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.7-2.el5

Vulnerabilities 16

  • Unscored —
    CVE-2010-0654

    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and …

  • Unscored —
    CVE-2010-1205 Public exploit EPSS 43%

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, migh…

    libpng12 tuxonice-userui Debian Azure Linux
  • Unscored —
    CVE-2010-1206

    The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x befo…

  • Unscored —
    CVE-2010-1207

    Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elemen…

  • Unscored —
    CVE-2010-1208

    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x …

  • Unscored —
    CVE-2010-1209

    Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before…

  • Unscored —
    CVE-2010-1210

    intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD…

  • Unscored —
    CVE-2010-1211

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2010-1212

    js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allo…

  • Unscored —
    CVE-2010-1213

    The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x be…

  • Unscored —
    CVE-2010-1214 Public exploit

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remo…

  • Unscored —
    CVE-2010-1215

    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content obj…

  • Unscored —
    CVE-2010-2751

    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 a…

  • Unscored —
    CVE-2010-2752 Public exploit

    Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x bef…

  • Unscored —
    CVE-2010-2753

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.…

  • Unscored —
    CVE-2010-2754

    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.7
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=568231
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=608238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=608763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615455
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615456
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615458
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615459
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615463
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615471
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615480
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=615488
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0547.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-0654
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0654
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0654
  • report
    https://access.redhat.com/security/cve/CVE-2010-1205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1205
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1205
  • report
    https://access.redhat.com/security/cve/CVE-2010-1206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1206
  • report
    https://access.redhat.com/security/cve/CVE-2010-1207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1207
  • report
    https://access.redhat.com/security/cve/CVE-2010-1208
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1208
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1208
  • report
    https://access.redhat.com/security/cve/CVE-2010-1209
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1209
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1209
  • report
    https://access.redhat.com/security/cve/CVE-2010-1210
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1210