Skip to content
OpenAdvisories
Unscored RHSA-2011:0471 15 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as firefox 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as firefox-debuginfo 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop firefox-debuginfo 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es firefox-debuginfo 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox 0:3.6.17-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws firefox-debuginfo 0:3.6.17-2.el4
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:3.6.17-1.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:3.6.17-1.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:1.9.2.17-3.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:1.9.2.17-3.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:1.9.2.17-3.el5_6
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:3.6.17-1.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:1.9.2.17-4.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:1.9.2.17-4.el6_0

Vulnerabilities 15

  • Unscored —
    CVE-2011-0065 Public exploit EPSS 74%

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, all…

  • Unscored —
    CVE-2011-0066

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, all…

  • Unscored —
    CVE-2011-0067

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocom…

  • Unscored —
    CVE-2011-0069

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x be…

  • Unscored —
    CVE-2011-0070

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x be…

  • Unscored —
    CVE-2011-0071

    Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, …

  • Unscored —
    CVE-2011-0072

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0073 Public exploit EPSS 71%

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange d…

  • Unscored —
    CVE-2011-0074

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0075

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0077

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0078

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunder…

  • Unscored —
    CVE-2011-0080

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2011-0081

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunde…

  • Unscored —
    CVE-2011-1202

    The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.…

    libxslt Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.17
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=684386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700622
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700635
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700658
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700677
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0471.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0065
  • report
    https://access.redhat.com/security/cve/CVE-2011-0066
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0066
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0066
  • report
    https://access.redhat.com/security/cve/CVE-2011-0067
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0067
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0067
  • report
    https://access.redhat.com/security/cve/CVE-2011-0069
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0069
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0069
  • report
    https://access.redhat.com/security/cve/CVE-2011-0070
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0070
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0070
  • report
    https://access.redhat.com/security/cve/CVE-2011-0071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0071
  • report
    https://access.redhat.com/security/cve/CVE-2011-0072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0072