Synopsis: Critical: firefox security update
Issue Date: 2013-01-08
CVE Numbers: CVE-2013-0769
CVE-2013-0762
CVE-2013-0766
CVE-2013-0767
CVE-2013-0759
CVE-2013-0744
CVE-2013-0746
CVE-2013-0748
CVE-2013-0750
CVE-2013-0758
CVE-2013-0753
CVE-2013-0754
—
Several flaws were found in the processing of malformed web content. A web page
containing malicious content could cause Firefox to crash or, potentially,
execute arbitrary code with the privileges of the user running Firefox.
(CVE-2013-0744, CVE-2013-0746, CVE-2013-0750, CVE-2013-0753, CVE-2013-0754,
CVE-2013-0762, CVE-2013-0766, CVE-2013-0767, CVE-2013-0769)
A flaw was found in the way Chrome Object Wrappers were implemented. Malicious
content could be used to cause Firefox to execute arbitrary code via plug-ins
installed in Firefox. (CVE-2013-0758)
A flaw in the way Firefox displayed URL values in the address bar could allow a
malicious site or user to perform a phishing attack. (CVE-2013-0759)
An information disclosure flaw was found in the way certain JavaScript
functions were implemented in Firefox. An attacker could use this flaw to
bypass Address Space Layout Randomization (ASLR) and other security
restrictions. (CVE-2013-0748)
After installing the update, Firefox must be restarted for the changes to
take effect.
—
SL5
x86_64
firefox-10.0.12-1.el5_9.i386.rpm
firefox-10.0.12-1.el5_9.x86_64.rpm
firefox-debuginfo-10.0.12-1.el5_9.i386.rpm
firefox-debuginfo-10.0.12-1.el5_9.x86_64.rpm
xulrunner-10.0.12-1.el5_9.i386.rpm
xulrunner-10.0.12-1.el5_9.x86_64.rpm
xulrunner-debuginfo-10.0.12-1.el5_9.i386.rpm
xulrunner-debuginfo-10.0.12-1.el5_9.x86_64.rpm
xulrunner-devel-10.0.12-1.el5_9.i386.rpm
xulrunner-devel-10.0.12-1.el5_9.x86_64.rpm
i386
firefox-10.0.12-1.el5_9.i386.rpm
firefox-debuginfo-10.0.12-1.el5_9.i386.rpm
xulrunner-10.0.12-1.el5_9.i386.rpm
xulrunner-debuginfo-10.0.12-1.el5_9.i386.rpm
xulrunner-devel-10.0.12-1.el5_9.i386.rpm
SL6
x86_64
firefox-10.0.12-1.el6_3.i686.rpm
firefox-10.0.12-1.el6_3.x86_64.rpm
firefox-debuginfo-10.0.12-1.el6_3.i686.rpm
firefox-debuginfo-10.0.12-1.el6_3.x86_64.rpm
xulrunner-10.0.12-1.el6_3.i686.rpm
xulrunner-10.0.12-1.el6_3.x86_64.rpm
xulrunner-debuginfo-10.0.12-1.el6_3.i686.rpm
xulrunner-debuginfo-10.0.12-1.el6_3.x86_64.rpm
xulrunner-devel-10.0.12-1.el6_3.i686.rpm
xulrunner-devel-10.0.12-1.el6_3.x86_64.rpm
i386
firefox-10.0.12-1.el6_3.i686.rpm
firefox-debuginfo-10.0.12-1.el6_3.i686.rpm
xulrunner-10.0.12-1.el6_3.i686.rpm
xulrunner-debuginfo-10.0.12-1.el6_3.i686.rpm
xulrunner-devel-10.0.12-1.el6_3.i686.rpm
– Scientific Linux Development Team