Skip to content
OpenAdvisories
Unscored RHSA-2012:0387 10 CVEs

Red Hat Security Advisory: firefox security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.3-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.3-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.3-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.3-1.el6_2

Vulnerabilities 10

  • Unscored —
    CVE-2012-0451

    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 throu…

  • Unscored —
    CVE-2012-0455

    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 t…

  • Unscored —
    CVE-2012-0456

    The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, T…

  • Unscored —
    CVE-2012-0457

    Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before…

  • Unscored —
    CVE-2012-0458

    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 t…

  • Unscored —
    CVE-2012-0459

    The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Th…

  • Unscored —
    CVE-2012-0460

    Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-0461

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firef…

  • Unscored —
    CVE-2012-0462

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before…

  • Unscored —
    CVE-2012-0464

    Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 1…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://rhn.redhat.com/errata/RHEA-2012-0327.html
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=729632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=784048
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=799042
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803111
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=803119
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0387.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-0451
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0451
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0451
  • report
    https://access.redhat.com/security/cve/CVE-2012-0455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0455
  • report
    https://access.redhat.com/security/cve/CVE-2012-0456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0456
  • report
    https://access.redhat.com/security/cve/CVE-2012-0457
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0457
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0457
  • report
    https://access.redhat.com/security/cve/CVE-2012-0458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0458
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0458
  • report
    https://access.redhat.com/security/cve/CVE-2012-0459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0459
  • report
    https://access.redhat.com/security/cve/CVE-2012-0460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0460
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0460
  • report
    https://access.redhat.com/security/cve/CVE-2012-0461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0461
  • report
    https://access.redhat.com/security/cve/CVE-2012-0462