firefox security update

2006-02-0219:37:08

CentOS Project

lists.centos.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.961

Percentile

99.5%

JSON

CentOS Errata and Security Advisory CESA-2006:0200

Mozilla Firefox is an open source Web browser.

Igor Bukanov discovered a bug in the way Firefox’s Javascript interpreter
derefernces objects. If a user visits a malicious web page, Firefox could
crash or execute arbitrary code as the user running Firefox. The Common
Vulnerabilities and Exposures project assigned the name CVE-2006-0292 to
this issue.

moz_bug_r_a4 discovered a bug in Firefox’s XULDocument.persist() function.
A malicious web page could inject arbitrary RDF data into a user’s
localstore.rdf file, which can cause Firefox to execute arbitrary
javascript when a user runs Firefox. (CVE-2006-0296)

A denial of service bug was found in the way Firefox saves history
information. If a user visits a web page with a very long title, it is
possible Firefox will crash or take a very long time the next time it is
run. (CVE-2005-4134)

This update also fixes a bug when using XSLT to transform documents.
Passing DOM Nodes as parameters to functions expecting an xsl:param could
cause Firefox to throw an exception.

Users of Firefox are advised to upgrade to this updated package, which
contains backported patches to correct these issues.

Affected packages:
firefox

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0200

OSVersionArchitecturePackageVersionFilename
CentOS4ia64firefox< 1.0.7-1.4.3.centos4firefox-1.0.7-1.4.3.centos4.ia64.rpm
CentOS3ia64firefox< 1.0.7-1.4.3.centos3firefox-1.0.7-1.4.3.centos3.ia64.rpm
CentOS3i386firefox< 1.0.7-1.4.3.centos3firefox-1.0.7-1.4.3.centos3.i386.rpm
CentOS3x86_64firefox< 1.0.7-1.4.3.centos3firefox-1.0.7-1.4.3.centos3.x86_64.rpm
CentOS4i386firefox< 1.0.7-1.4.3.centos4firefox-1.0.7-1.4.3.centos4.i386.rpm
CentOS4x86_64firefox< 1.0.7-1.4.3.centos4firefox-1.0.7-1.4.3.centos4.x86_64.rpm
CentOS4alphafirefox< 1.0.7-1.4.3axp.centos4firefox-1.0.7-1.4.3axp.centos4.alpha.rpm
CentOS4s390firefox< 1.0.7-1.4.3.centos4firefox-1.0.7-1.4.3.centos4.s390.rpm
CentOS4s390xfirefox< 1.0.7-1.4.3.centos4firefox-1.0.7-1.4.3.centos4.s390x.rpm
CentOS3s390firefox< 1.0.7-1.4.3.centos3firefox-1.0.7-1.4.3.centos3.s390.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	firefox	< 1.0.7-1.4.3.centos4	firefox-1.0.7-1.4.3.centos4.ia64.rpm
CentOS	3	ia64	firefox	< 1.0.7-1.4.3.centos3	firefox-1.0.7-1.4.3.centos3.ia64.rpm
CentOS	3	i386	firefox	< 1.0.7-1.4.3.centos3	firefox-1.0.7-1.4.3.centos3.i386.rpm
CentOS	3	x86_64	firefox	< 1.0.7-1.4.3.centos3	firefox-1.0.7-1.4.3.centos3.x86_64.rpm
CentOS	4	i386	firefox	< 1.0.7-1.4.3.centos4	firefox-1.0.7-1.4.3.centos4.i386.rpm
CentOS	4	x86_64	firefox	< 1.0.7-1.4.3.centos4	firefox-1.0.7-1.4.3.centos4.x86_64.rpm
CentOS	4	alpha	firefox	< 1.0.7-1.4.3axp.centos4	firefox-1.0.7-1.4.3axp.centos4.alpha.rpm
CentOS	4	s390	firefox	< 1.0.7-1.4.3.centos4	firefox-1.0.7-1.4.3.centos4.s390.rpm
CentOS	4	s390x	firefox	< 1.0.7-1.4.3.centos4	firefox-1.0.7-1.4.3.centos4.s390x.rpm
CentOS	3	s390	firefox	< 1.0.7-1.4.3.centos3	firefox-1.0.7-1.4.3.centos3.s390.rpm