firefox security update

2005-09-1009:39:57

CentOS Project

lists.centos.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.964 High

EPSS

Percentile

99.6%

JSON

CentOS Errata and Security Advisory CESA-2005:768

Mozilla Firefox is an open source Web browser.

A bug was found in the way Firefox processes certain international domain
names. An attacker could create a specially crafted HTML file, which when
viewed by the victim would cause Firefox to crash or possibly execute
arbitrary code. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2871 to this issue.

Users of Firefox are advised to upgrade to this updated package that
contains a backported patch and is not vulnerable to this issue.

Affected packages:
firefox

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:768

OSVersionArchitecturePackageVersionFilename
CentOS4ia64firefox< 1.0.6-1.4.2.centos4firefox-1.0.6-1.4.2.centos4.ia64.rpm
CentOS3ia64firefox< 1.0.6-1.4.2.centos3firefox-1.0.6-1.4.2.centos3.ia64.rpm
CentOS4i386firefox< 1.0.6-1.4.2.centos4firefox-1.0.6-1.4.2.centos4.i386.rpm
CentOS4x86_64firefox< 1.0.6-1.4.2.centos4firefox-1.0.6-1.4.2.centos4.x86_64.rpm
CentOS4s390firefox< 1.0.6-1.4.2.centos4firefox-1.0.6-1.4.2.centos4.s390.rpm
CentOS4s390xfirefox< 1.0.6-1.4.2.centos4firefox-1.0.6-1.4.2.centos4.s390x.rpm
CentOS3i386firefox< 1.0.6-1.4.2.centos3firefox-1.0.6-1.4.2.centos3.i386.rpm
CentOS3x86_64firefox< 1.0.6-1.4.2.centos3firefox-1.0.6-1.4.2.centos3.x86_64.rpm
CentOS3s390firefox< 1.0.6-1.4.2.centos3firefox-1.0.6-1.4.2.centos3.s390.rpm
CentOS3s390xfirefox< 1.0.6-1.4.2.centos3firefox-1.0.6-1.4.2.centos3.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	firefox	< 1.0.6-1.4.2.centos4	firefox-1.0.6-1.4.2.centos4.ia64.rpm
CentOS	3	ia64	firefox	< 1.0.6-1.4.2.centos3	firefox-1.0.6-1.4.2.centos3.ia64.rpm
CentOS	4	i386	firefox	< 1.0.6-1.4.2.centos4	firefox-1.0.6-1.4.2.centos4.i386.rpm
CentOS	4	x86_64	firefox	< 1.0.6-1.4.2.centos4	firefox-1.0.6-1.4.2.centos4.x86_64.rpm
CentOS	4	s390	firefox	< 1.0.6-1.4.2.centos4	firefox-1.0.6-1.4.2.centos4.s390.rpm
CentOS	4	s390x	firefox	< 1.0.6-1.4.2.centos4	firefox-1.0.6-1.4.2.centos4.s390x.rpm
CentOS	3	i386	firefox	< 1.0.6-1.4.2.centos3	firefox-1.0.6-1.4.2.centos3.i386.rpm
CentOS	3	x86_64	firefox	< 1.0.6-1.4.2.centos3	firefox-1.0.6-1.4.2.centos3.x86_64.rpm
CentOS	3	s390	firefox	< 1.0.6-1.4.2.centos3	firefox-1.0.6-1.4.2.centos3.s390.rpm
CentOS	3	s390x	firefox	< 1.0.6-1.4.2.centos3	firefox-1.0.6-1.4.2.centos3.s390x.rpm