Oval Definition:oval:com.redhat.rhsa:def:20090315
Revision Date:2009-03-05Version:637
Title:RHSA-2009:0315: firefox security update (Critical)
Description:Mozilla Firefox is an open source Web browser.

  • Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775)

  • Several flaws were found in the way malformed content was processed. A website containing specially-crafted content could, potentially, trick a Firefox user into surrendering sensitive information. (CVE-2009-0776, CVE-2009-0777)

    For technical details regarding these flaws, please see the Mozilla security advisories for Firefox 3.0.7. You can find a link to the Mozilla advisories in the References section of this errata.

    All Firefox users should upgrade to these updated packages, which contain Firefox version 3.0.7, and which correct these issues. After installing the update, Firefox must be restarted for the changes to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-0040
    CVE-2009-0771
    CVE-2009-0772
    CVE-2009-0773
    CVE-2009-0774
    CVE-2009-0775
    CVE-2009-0776
    CVE-2009-0777
    RHSA-2009:0315
    RHSA-2009:0315-01
    RHSA-2009:0315-01
    Platform(s):Red Hat Enterprise Linux 4
    Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND firefox is earlier than 0:3.0.7-1.el4
  • AND firefox is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • firefox is earlier than 0:3.0.7-1.el5
  • AND firefox is signed with Red Hat redhatrelease2 key
  • xulrunner is earlier than 0:1.9.0.7-1.el5
  • AND xulrunner is signed with Red Hat redhatrelease2 key
  • xulrunner-devel is earlier than 0:1.9.0.7-1.el5
  • AND xulrunner-devel is signed with Red Hat redhatrelease2 key
  • xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5
  • AND xulrunner-devel-unstable is signed with Red Hat redhatrelease2 key
  • BACK