Lucene search

K
centosCentOS ProjectCESA-2008:0222
HistoryApr 19, 2008 - 1:20 p.m.

firefox security update

2008-04-1913:20:35
CentOS Project
lists.centos.org
50

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%

CentOS Errata and Security Advisory CESA-2008:0222

Mozilla Firefox is an open source Web browser.

A flaw was found in the processing of malformed JavaScript content. A web
page containing such malicious content could cause Firefox to crash or,
potentially, execute arbitrary code as the user running Firefox.
(CVE-2008-1380)

All Firefox users should upgrade to these updated packages, which contain
backported patches that correct these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-April/076996.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076997.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076999.html
https://lists.centos.org/pipermail/centos-announce/2008-April/077001.html
https://lists.centos.org/pipermail/centos-announce/2008-April/077025.html
https://lists.centos.org/pipermail/centos-announce/2008-April/077033.html

Affected packages:
firefox
firefox-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0222

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%