Skip to content
OpenAdvisories
Unscored RHSA-2013:1812 8 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:24.2.0-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:24.2.0-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:24.2.0-1.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:24.2.0-1.el5_10
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:24.2.0-1.el6_5

Vulnerabilities 8

  • Unscored —
    CVE-2013-0772

    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2…

  • Unscored —
    CVE-2013-5609

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2…

  • Unscored —
    CVE-2013-5612

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for r…

  • Unscored —
    CVE-2013-5613

    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox …

  • Unscored —
    CVE-2013-5614

    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME eleme…

  • Unscored —
    CVE-2013-5616

    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0,…

  • Unscored —
    CVE-2013-5618 EPSS 10%

    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor…

  • Unscored —
    CVE-2013-6671 EPSS 11%

    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird bef…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039429
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1812.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=911840
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0772
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0772
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-22.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5609
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-104.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5612
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5612
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5612
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-106.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5613
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5613
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5613
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-114.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5614
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5614
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5614
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-107.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5616
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5616
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5616
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-108.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5618
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5618
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5618
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-109.html