title: Red Hat Security Advisory: firefox security update
description: firefox: cross-domain information disclosure libpng: out-of-bounds memory write Firefox: Spoofing attacks via vectors involving 'No Content' status code or via a windows.stop call Mozilla Same-origin bypass using canvas context Mozilla DOM attribute cloning remote code execution vulnerability Mozilla Use-after-free error in NodeIterator Mozilla Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish Mozilla miscellaneous memory safety hazards Mozilla miscellaneous memory safety hazards Mozilla Cross-origin data disclosure via Web Workers and importScripts Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability Mozilla Arbitrary code execution using SJOW and fast native function Mozilla SSL spoofing with history.back() and history.forward() nsCSSValue:: Array index integer overflow Mozilla nsTreeSelection dangling pointer remote code execution vulnerability Mozilla Cross-origin data leakage from script filename in error messages
cpes: cpe:/o:redhat:enterprise_linux:4::as cpe:/o:redhat:enterprise_linux:4::desktop cpe:/o:redhat:enterprise_linux:4::es cpe:/o:redhat:enterprise_linux:4::ws cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::client_workstation cpe:/o:redhat:enterprise_linux:5::server