Skip to content
OpenAdvisories
Unscored RHSA-2012:1350 20 CVEs

Red Hat Security Advisory: firefox security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.8-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.8-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.8-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.8-1.el6_3

Vulnerabilities 20

  • Unscored —
    CVE-2012-1956

    Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.define…

  • Unscored —
    CVE-2012-3982

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-3986

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3988

    Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, T…

  • Unscored —
    CVE-2012-3990

    Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x b…

  • Unscored —
    CVE-2012-3991

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3992

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3993 Public exploit EPSS 43%

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderb…

  • Unscored —
    CVE-2012-3994

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-3995

    The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 1…

  • Unscored —
    CVE-2012-4179

    Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firef…

  • Unscored —
    CVE-2012-4180

    Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Fir…

  • Unscored —
    CVE-2012-4181

    Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefo…

  • Unscored —
    CVE-2012-4182

    Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10…

  • Unscored —
    CVE-2012-4183

    Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox E…

  • Unscored —
    CVE-2012-4184

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderb…

  • Unscored —
    CVE-2012-4185

    Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Th…

  • Unscored —
    CVE-2012-4186 EPSS 15%

    Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10…

  • Unscored —
    CVE-2012-4187

    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-4188 EPSS 15%

    Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863618
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863622
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863624
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=863628
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1350.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-1956
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1956
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1956
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-59.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3982
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3982
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3982
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-74.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3986
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3986
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3986
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-77.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3988
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3988
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3988
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-79.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3990
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3990
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3990
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-87.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3991
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3991
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3991
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-81.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-3992