Skip to content
OpenAdvisories
Unscored RHSA-2011:0310 11 CVEs

Red Hat Security Advisory: firefox security and bug fix update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.14-4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.14-4.el4
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.14-4.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.14-4.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.14-4.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.14-4.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.14-4.el5_6
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:3.6.14-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:1.9.2.14-3.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:1.9.2.14-3.el6_0

Vulnerabilities 11

  • Unscored —
    CVE-2010-1585

    The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox …

  • Unscored —
    CVE-2011-0051

    Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain re…

  • Unscored —
    CVE-2011-0053

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Th…

  • Unscored —
    CVE-2011-0054

    Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before…

  • Unscored —
    CVE-2011-0055

    Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x befo…

  • Unscored —
    CVE-2011-0056

    Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before…

  • Unscored —
    CVE-2011-0057

    Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14…

  • Unscored —
    CVE-2011-0058

    Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allow…

  • Unscored —
    CVE-2011-0059

    Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey…

  • Unscored —
    CVE-2011-0061

    Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might all…

  • Unscored —
    CVE-2011-0062

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.14
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=665031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675082
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675083
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675087
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675090
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675091
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675092
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=675143
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=681369
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0310.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1585
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1585
  • report
    https://access.redhat.com/security/cve/CVE-2011-0051
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0051
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0051
  • report
    https://access.redhat.com/security/cve/CVE-2011-0053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0053
  • report
    https://access.redhat.com/security/cve/CVE-2011-0054
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0054
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0054
  • report
    https://access.redhat.com/security/cve/CVE-2011-0055
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0055
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0055
  • report
    https://access.redhat.com/security/cve/CVE-2011-0056
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0056
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0056
  • report
    https://access.redhat.com/security/cve/CVE-2011-0057
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0057
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0057
  • report
    https://access.redhat.com/security/cve/CVE-2011-0058
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0058