Skip to content
OpenAdvisories
Unscored RHSA-2010:0681 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 29, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 68

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr-debuginfo 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nspr-devel 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-tools 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-debuginfo 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-devel 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-tools 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr-debuginfo 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nspr-devel 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-tools 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.9-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-debuginfo 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-devel 0:4.8.6-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.7-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-tools 0:3.12.7-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.6.9-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.6.9-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nspr 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nspr-debuginfo 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-debuginfo 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nspr-devel 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.9-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.9-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspr 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspr-debuginfo 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nspr-devel 0:4.8.6-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.7-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.9-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.9-1.el5

Vulnerabilities 12

  • Unscored —
    CVE-2010-2760

    Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, T…

  • Unscored —
    CVE-2010-2762

    The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3…

  • Unscored —
    CVE-2010-2764

    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey be…

  • Unscored —
    CVE-2010-2765

    Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunde…

  • Unscored —
    CVE-2010-2766

    The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.…

  • Unscored —
    CVE-2010-2767

    The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 …

  • Unscored —
    CVE-2010-2768

    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey be…

  • Unscored —
    CVE-2010-2769

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.…

  • Unscored —
    CVE-2010-3166

    Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x b…

  • Unscored —
    CVE-2010-3167

    The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.…

  • Unscored —
    CVE-2010-3168

    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey be…

  • Unscored —
    CVE-2010-3169

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thu…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.9
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630055
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630059
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630064
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630069
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630075
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630078
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0681.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2760
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2760
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2760
  • report
    https://access.redhat.com/security/cve/CVE-2010-2762
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2762
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2762
  • report
    https://access.redhat.com/security/cve/CVE-2010-2764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2764
  • report
    https://access.redhat.com/security/cve/CVE-2010-2765
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2765
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2765
  • report
    https://access.redhat.com/security/cve/CVE-2010-2766
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2766
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2766
  • report
    https://access.redhat.com/security/cve/CVE-2010-2767
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2767
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2767
  • report
    https://access.redhat.com/security/cve/CVE-2010-2768
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2768
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2768
  • report
    https://access.redhat.com/security/cve/CVE-2010-2769
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2769
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2769