Skip to content
OpenAdvisories
Unscored RHSA-2013:1476 8 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client xulrunner-debuginfo 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-debuginfo 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation xulrunner-devel 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-debuginfo 0:17.0.10-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server xulrunner-devel 0:17.0.10-1.el5_10
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client xulrunner-devel 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode xulrunner-devel 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server xulrunner-devel 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-debuginfo 0:17.0.10-1.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation xulrunner-devel 0:17.0.10-1.el6_4

Vulnerabilities 8

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0…

  • Unscored —

    The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird…

  • Unscored —

    Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ES…

  • Unscored —

    Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) imp…

  • Unscored —

    Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.…

  • Unscored —

    Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Fi…

  • Unscored —

    The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.…

  • Unscored —

    The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=983488
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023835
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023841
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023863
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1476.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-5590
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5590
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5590
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5595
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5595
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-96.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5597
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5597
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5597
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-98.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5599
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5599
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5599
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-100.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5600
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5600
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5600
  • report
    https://access.redhat.com/security/cve/CVE-2013-5601
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5601
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5601
  • report
    https://access.redhat.com/security/cve/CVE-2013-5602
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5602
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5602
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-101.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5604
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5604
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5604