Skip to content
OpenAdvisories
Unscored RHSA-2013:1140 6 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 25

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:17.0.8-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:17.0.8-1.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:17.0.8-3.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:17.0.8-3.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:17.0.8-3.el5_9
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:17.0.8-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:17.0.8-3.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:17.0.8-3.el6_4

Vulnerabilities 6

  • Unscored —
    CVE-2013-1701

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0…

  • Unscored —
    CVE-2013-1709

    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.…

  • Unscored —
    CVE-2013-1710 Public exploit EPSS 42%

    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird bef…

  • Unscored —
    CVE-2013-1713

    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.…

  • Unscored —
    CVE-2013-1714

    The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.…

  • Unscored —
    CVE-2013-1717

    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=993605
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1140.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1701
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1701
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1701
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-63.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1709
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1709
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1709
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-68.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1710
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1710
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1710
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-69.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1713
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1713
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-72.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1714
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1714
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1714
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-73.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1717
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1717
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1717
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-75.html