Skip to content
OpenAdvisories
Unscored RHSA-2010:0782 10 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::as nss-tools 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-tools 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::es nss-tools 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.11-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.8-1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws nss-tools 0:3.12.8-1.el4
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:3.6.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:3.6.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-debuginfo 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client nss-tools 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-debuginfo 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-devel 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation nss-pkcs11-devel 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-debuginfo 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-devel 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-pkcs11-devel 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server nss-tools 0:3.12.8-1.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.11-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.11-2.el5

Vulnerabilities 10

  • Unscored —
    CVE-2010-3170

    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey b…

    nss Debian
  • Unscored —
    CVE-2010-3173

    The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x bef…

    nss Debian
  • Unscored —
    CVE-2010-3175

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x…

  • Unscored —
    CVE-2010-3176

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2010-3177

    Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x bef…

  • Unscored —
    CVE-2010-3178

    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey b…

  • Unscored —
    CVE-2010-3179 Public exploit EPSS 10%

    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.1…

  • Unscored —
    CVE-2010-3180

    Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunde…

  • Unscored —
    CVE-2010-3182

    A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 …

  • Unscored —
    CVE-2010-3183

    The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird b…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.com/en-US/firefox/3.6.11/releasenotes/
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.11
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=630047
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642275
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642286
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642294
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642300
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642302
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0782.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-3170
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3170
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3170
  • report
    https://access.redhat.com/security/cve/CVE-2010-3173
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3173
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3173
  • report
    https://access.redhat.com/security/cve/CVE-2010-3175
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3175
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3175
  • report
    https://access.redhat.com/security/cve/CVE-2010-3176
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3176
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3176
  • report
    https://access.redhat.com/security/cve/CVE-2010-3177
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3177
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3177
  • report
    https://access.redhat.com/security/cve/CVE-2010-3178
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3178
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3178
  • report
    https://access.redhat.com/security/cve/CVE-2010-3179
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3179
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3179
  • report
    https://access.redhat.com/security/cve/CVE-2010-3180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3180
  • report
    https://access.redhat.com/security/cve/CVE-2010-3182