Skip to content
OpenAdvisories
Unscored RHSA-2012:1088 17 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 22, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.6-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.6-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.6-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.6-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.6-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.6-2.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.6-1.el6_3

Vulnerabilities 17

  • Unscored —
    CVE-2012-1948

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before…

  • Unscored —
    CVE-2012-1950

    The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote a…

  • Unscored —
    CVE-2012-1951

    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Fir…

  • Unscored —
    CVE-2012-1952

    The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbir…

  • Unscored —
    CVE-2012-1953

    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6,…

  • Unscored —
    CVE-2012-1954

    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.…

  • Unscored —
    CVE-2012-1955

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1957

    An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.…

  • Unscored —
    CVE-2012-1958

    Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ES…

  • Unscored —
    CVE-2012-1959

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1961

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1962

    Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox E…

  • Unscored —
    CVE-2012-1963

    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Th…

  • Unscored —
    CVE-2012-1964

    The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4…

  • Unscored —
    CVE-2012-1965

    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a…

  • Unscored —
    CVE-2012-1966

    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for …

  • Unscored —
    CVE-2012-1967

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • article
    https://rhn.redhat.com/errata/RHBA-2012-0337.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=838879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840203
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840207
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840225
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840259
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1088.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-1948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1948
  • report
    https://access.redhat.com/security/cve/CVE-2012-1950
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1950
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1950
  • report
    https://access.redhat.com/security/cve/CVE-2012-1951
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1951
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1951
  • report
    https://access.redhat.com/security/cve/CVE-2012-1952
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1952
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1952
  • report
    https://access.redhat.com/security/cve/CVE-2012-1953
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1953
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1953
  • report
    https://access.redhat.com/security/cve/CVE-2012-1954
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1954
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1954
  • report
    https://access.redhat.com/security/cve/CVE-2012-1955
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1955