Skip to content
OpenAdvisories
Unscored RHSA-2013:0144 12 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Fixed packages 25

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:10.0.12-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:10.0.12-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:10.0.12-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:10.0.12-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:10.0.12-1.el5_9
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:10.0.12-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:10.0.12-1.el6_3

Vulnerabilities 12

  • Unscored —

    Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox be…

  • Unscored —

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —

    The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x befo…

  • Unscored —

    Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 1…

  • Unscored —
    CVE-2013-0753 Public exploit EPSS 51%

    Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox …

  • Unscored —

    Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2013-0758 Public exploit EPSS 73%

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —

    Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x b…

  • Unscored —

    Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x be…

  • Unscored —

    The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 1…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892148
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892149
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892150
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0144.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0744
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0744
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0744
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-05.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0746
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0746
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-09.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0748
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0748
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0748
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-11.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0750
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-12.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0753
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0753
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0753
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-16.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0754
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0754
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0754
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-17.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-0758
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0758