Skip to content
OpenAdvisories
Unscored RHSA-2012:1210 24 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.7-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.7-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.7-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.7-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.7-2.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.7-2.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.7-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.7-1.el6_3

Vulnerabilities 24

  • Unscored —
    CVE-2012-1970

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-1972

    Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Fi…

  • Unscored —
    CVE-2012-1973

    Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox…

  • Unscored —
    CVE-2012-1974

    Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR…

  • Unscored —
    CVE-2012-1975

    Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x b…

  • Unscored —
    CVE-2012-1976

    Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Fir…

  • Unscored —
    CVE-2012-3956

    Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefo…

  • Unscored —
    CVE-2012-3957

    Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x…

  • Unscored —
    CVE-2012-3958

    Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Fi…

  • Unscored —
    CVE-2012-3959

    Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox E…

  • Unscored —
    CVE-2012-3960

    Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Fire…

  • Unscored —
    CVE-2012-3961

    Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10…

  • Unscored —
    CVE-2012-3962

    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3963

    Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10…

  • Unscored —
    CVE-2012-3964

    Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x b…

  • Unscored —
    CVE-2012-3966

    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3967

    The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thund…

  • Unscored —
    CVE-2012-3968

    Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7…

  • Unscored —
    CVE-2012-3969

    Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x befo…

  • Unscored —
    CVE-2012-3970

    Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-3972

    The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-3976

    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocatio…

  • Unscored —
    CVE-2012-3978

    The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15…

  • Unscored —
    CVE-2012-3980

    The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbir…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851910
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851918
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851924
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851931
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851939
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1210.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-1970
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1970
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1970
  • report
    https://access.redhat.com/security/cve/CVE-2012-1972
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1972
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1972
  • report
    https://access.redhat.com/security/cve/CVE-2012-1973
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1973
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1973
  • report
    https://access.redhat.com/security/cve/CVE-2012-1974
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1974
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1974
  • report
    https://access.redhat.com/security/cve/CVE-2012-1975
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1975
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1975
  • report
    https://access.redhat.com/security/cve/CVE-2012-1976
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1976
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1976
  • report
    https://access.redhat.com/security/cve/CVE-2012-3956
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3956
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3956
  • report
    https://access.redhat.com/security/cve/CVE-2012-3957
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3957
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3957
  • report
    https://access.redhat.com/security/cve/CVE-2012-3958
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3958
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3958