Lucene search
RedHatRHSA-2019:0672HistoryMar 27, 2019 - 8:48 a.m.
(RHSA-2019:0672) Critical: firefox security update
2019-03-2708:48:21
access.redhat.com
110
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.936
Percentile
99.2%
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 60.6.1 ESR.
Security Fix(es):
-
Mozilla: IonMonkey MArraySlice has incorrect alias information (CVE-2019-9810)
-
Mozilla: Ionmonkey type confusion with proto mutations (CVE-2019-9813)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | ppc64 | firefox-debuginfo | < 60.6.1-1.el6_10 | firefox-debuginfo-60.6.1-1.el6_10.ppc64.rpm |
| RedHat | 6 | ppc64 | firefox | < 60.6.1-1.el6_10 | firefox-60.6.1-1.el6_10.ppc64.rpm |
| RedHat | 6 | x86_64 | firefox | < 60.6.1-1.el6_10 | firefox-60.6.1-1.el6_10.x86_64.rpm |
| RedHat | 6 | i686 | firefox-debuginfo | < 60.6.1-1.el6_10 | firefox-debuginfo-60.6.1-1.el6_10.i686.rpm |
| RedHat | 6 | i686 | firefox | < 60.6.1-1.el6_10 | firefox-60.6.1-1.el6_10.i686.rpm |
| RedHat | 6 | x86_64 | firefox-debuginfo | < 60.6.1-1.el6_10 | firefox-debuginfo-60.6.1-1.el6_10.x86_64.rpm |
| RedHat | 6 | s390x | firefox-debuginfo | < 60.6.1-1.el6_10 | firefox-debuginfo-60.6.1-1.el6_10.s390x.rpm |
| RedHat | 6 | s390x | firefox | < 60.6.1-1.el6_10 | firefox-60.6.1-1.el6_10.s390x.rpm |
Related
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2019-09, MFSA2019-10) - Windows
2019-03-26 00:00:00
Debian: Security Advisory (DLA-1727-1)
2019-03-25 00:00:00
Mageia: Security Advisory (MGASA-2019-0131)
2022-01-28 00:00:00
nessus
nessus
Mozilla Thunderbird < 60.6.1
2019-03-29 00:00:00
Mozilla Firefox < 66.0.1
2019-03-22 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1152)
2019-04-05 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.6.1 — Mozilla
2019-03-25 00:00:00
Security vulnerabilities fixed in Firefox 66.0.1 — Mozilla
2019-03-22 00:00:00
Security vulnerabilities fixed in Firefox 60.6.1 — Mozilla
2019-03-22 00:00:00
osv
osv
firefox-esr - security update
2019-03-25 00:00:00
firefox-esr - security update
2019-03-24 00:00:00
MozillaThunderbird-91.1.1-1.1 on GA media
2024-06-15 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-03-22 21:29:01
debian
debian
[SECURITY] [DSA 4417-1] firefox-esr security update
2019-03-24 20:15:52
[SECURITY] [DLA 1727-1] firefox-esr security update
2019-03-25 13:12:18
centos
centos
firefox security update
2019-04-01 19:07:32
firefox security update
2019-04-01 19:05:36
thunderbird security update
2019-04-01 19:08:08
suse
suse
Security update for MozillaThunderbird (important)
2019-04-04 00:00:00
Security update for MozillaFirefox (important)
2019-03-29 00:00:00
Security update for MozillaFirefox (important)
2019-03-27 00:00:00
archlinux
archlinux
[ASA-201903-14] firefox: arbitrary code execution
2019-03-23 00:00:00
[ASA-201904-4] thunderbird: arbitrary code execution
2019-04-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 60.6.1-alt1
2019-03-23 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 60.6.1-alt1
2019-03-26 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2019-04-05 21:12:59
Updated thunderbird packages fix security vulnerability
2019-04-05 21:12:59
ibm
ibm
Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS
2019-07-08 08:55:01
ubuntu
ubuntu
Firefox vulnerabilities
2019-03-25 00:00:00
Thunderbird vulnerabilities
2019-03-28 00:00:00
oraclelinux
oraclelinux
firefox security update
2019-03-28 00:00:00
firefox security update
2019-03-27 00:00:00
firefox security update
2019-07-30 00:00:00
kaspersky
kaspersky
KLA11451 Multiple vulnerabilities in Mozilla Firefox ESR
2019-03-22 00:00:00
KLA11450 Multiple vulnerabilities in Mozilla Firefox
2019-03-22 00:00:00
KLA11453 Multiple vulnerabilities in Mozilla Thunderbird
2019-03-25 00:00:00
redhat
redhat
(RHSA-2019:0671) Critical: firefox security update
2019-03-27 07:14:51
(RHSA-2019:0966) Critical: firefox security update
2019-05-07 03:37:57
(RHSA-2019:0680) Important: thunderbird security update
2019-03-28 12:55:12
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox IonMonkey JIT Compiler Buffer Overflow (CVE-2019-9810)
2019-04-03 00:00:00
Mozilla Firefox IonMonkey JIT Compiler Type Confusion (CVE-2019-9813)
2019-04-21 00:00:00
zdt
zdt
exploitdb
exploitdb
veracode
veracode
Type Confusion
2019-05-16 03:58:49
Buffer Overflow
2019-05-16 03:58:52
packetstorm
packetstorm
SpiderMonkey IonMonkey Type Confusion
2019-03-29 00:00:00
Firefox Array.prototype.slice Buffer Overflow
2019-03-27 00:00:00
cvelist
cvelist
CVE-2019-9813
2019-04-26 16:09:57
CVE-2019-9810
2019-04-26 16:10:13
cve
cve
CVE-2019-9813
2019-04-26 17:29:04
CVE-2019-9810
2019-04-26 17:29:04
zdi
zdi
nvd
nvd
CVE-2019-9813
2019-04-26 17:29:04
CVE-2019-9810
2019-04-26 17:29:04
debiancve
debiancve
CVE-2019-9810
2019-04-26 17:29:04
CVE-2019-9813
2019-04-26 17:29:04
exploitpack
exploitpack
alpinelinux
alpinelinux
CVE-2019-9813
2019-04-26 17:29:04
CVE-2019-9810
2019-04-26 17:29:04
prion
prion
Type confusion
2019-04-26 17:29:00
Buffer overflow
2019-04-26 17:29:00
cisa
cisa
Mozilla Releases Security Update for Thunderbird
2019-03-25 00:00:00
ubuntucve
ubuntucve
CVE-2019-9813
2019-03-25 00:00:00
CVE-2019-9810
2019-03-25 00:00:00
redhatcve
redhatcve
CVE-2019-9813
2020-08-18 11:15:53
CVE-2019-9810
2020-04-03 14:01:31
githubexploit
githubexploit
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox
2019-05-05 17:19:02
Exploit for Improper Input Validation in Mozilla Firefox Esr
2019-09-29 07:08:52
Exploit for Type Confusion in Mozilla Thunderbird
2020-04-13 15:11:46
attackerkb
attackerkb
CVE-2019-9810
2019-04-26 00:00:00
amazon
amazon
Critical: thunderbird
2019-04-25 16:37:00
thn
thn
gentoo
gentoo
Mozilla Thunderbird and Firefox: Multiple vulnerabilities
2019-04-02 00:00:00
kitploit
kitploit
Fuzzilli - A JavaScript Engine Fuzzer
2020-11-21 20:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.936
Percentile
99.2%
Related for RHSA-2019:0672