Skip to content
OpenAdvisories
Unscored RHSA-2012:0710 11 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.5-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.5-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.5-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.5-1.el6_2

Vulnerabilities 11

  • Unscored —
    CVE-2011-3101

    Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which ha…

  • Unscored —
    CVE-2012-1937

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before…

  • Unscored —
    CVE-2012-1938

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and…

  • Unscored —
    CVE-2012-1939

    jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determin…

  • Unscored —
    CVE-2012-1940

    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 1…

  • Unscored —
    CVE-2012-1941

    Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 1…

  • Unscored —
    CVE-2012-1944

    The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, T…

  • Unscored —
    CVE-2012-1945

    Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1946

    Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefo…

  • Unscored —
    CVE-2012-1947

    Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-3105

    The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827831
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827832
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827843
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0710.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3101
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3101
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3101
  • report
    https://access.redhat.com/security/cve/CVE-2012-1937
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1937
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1937
  • report
    https://access.redhat.com/security/cve/CVE-2012-1938
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1938
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1938
  • report
    https://access.redhat.com/security/cve/CVE-2012-1939
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1939
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1939
  • report
    https://access.redhat.com/security/cve/CVE-2012-1940
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1940
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1940
  • report
    https://access.redhat.com/security/cve/CVE-2012-1941
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1941
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1941
  • report
    https://access.redhat.com/security/cve/CVE-2012-1944
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1944
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1944
  • report
    https://access.redhat.com/security/cve/CVE-2012-1945
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1945
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1945
  • report
    https://access.redhat.com/security/cve/CVE-2012-1946
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1946
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1946
  • report
    https://access.redhat.com/security/cve/CVE-2012-1947
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1947
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1947
  • report
    https://access.redhat.com/security/cve/CVE-2012-3105