Lucene search

K
centosCentOS ProjectCESA-2010:0558
HistoryAug 06, 2010 - 11:21 p.m.

firefox security update

2010-08-0623:21:00
CentOS Project
lists.centos.org
40

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.221 Low

EPSS

Percentile

96.5%

CentOS Errata and Security Advisory CESA-2010:0558

Mozilla Firefox is an open source web browser.

An invalid free flaw was found in Firefoxโ€™s plugin handler. Malicious web
content could result in an invalid memory pointer being freed, causing Firefox
to crash or, potentially, execute arbitrary code with the privileges of the user
running Firefox. (CVE-2010-2755)

All Firefox users should upgrade to these updated packages, which contain a
backported patch that corrects this issue. After installing the update, Firefox
must be restarted for the changes to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2010-August/079042.html
https://lists.centos.org/pipermail/centos-announce/2010-August/079043.html

Affected packages:
firefox

Upstream details at:
https://access.redhat.com/errata/RHSA-2010:0558

OSVersionArchitecturePackageVersionFilename
CentOS4i386firefox<ย 3.6.7-3.el4.centosfirefox-3.6.7-3.el4.centos.i386.rpm
CentOS4x86_64firefox<ย 3.6.7-3.el4.centosfirefox-3.6.7-3.el4.centos.x86_64.rpm

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.221 Low

EPSS

Percentile

96.5%