Skip to content
OpenAdvisories
Unscored RHSA-2012:1482 16 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.11-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.11-1.el6_3

Vulnerabilities 16

  • Unscored —
    CVE-2012-4201

    The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17…

  • Unscored —
    CVE-2012-4202 EPSS 11%

    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR …

  • Unscored —
    CVE-2012-4207

    The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbir…

  • Unscored —
    CVE-2012-4209

    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-4210

    The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the c…

  • Unscored —
    CVE-2012-4214

    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  • Unscored —
    CVE-2012-4215

    Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Fire…

  • Unscored —
    CVE-2012-4216

    Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-5829

    Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-5830

    Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, …

  • Unscored —
    CVE-2012-5833

    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, T…

  • Unscored —
    CVE-2012-5835

    Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird be…

  • Unscored —
    CVE-2012-5839

    Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.…

  • Unscored —
    CVE-2012-5840

    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  • Unscored —
    CVE-2012-5841

    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-5842

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877628
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877634
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877635
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1482.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-4201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4201
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-93.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4202
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-92.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4207
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-101.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4209
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4209
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4209
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-103.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4210
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4210
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4210
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-104.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4214
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4214
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4214
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-105.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4215
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4215
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4215