title: Red Hat Security Advisory: firefox security update
description: firefox/nss: doesn't handle IP-based wildcards in X509 certificates safely NSS: insecure Diffie-Hellman key exchange Mozilla miscellaneous memory safety hazards Mozilla miscellaneous memory safety hazards Mozilla XSS in gopher parser when parsing hrefs Mozilla cross-site information disclosure via modal calls Mozilla buffer overflow and memory corruption using document.write Mozilla use-after-free error in nsBarProp Mozilla unsafe library loading flaw Mozilla dangling pointer vulnerability in LookupGetterOrSetter
cpes: cpe:/o:redhat:enterprise_linux:4::as cpe:/o:redhat:enterprise_linux:4::desktop cpe:/o:redhat:enterprise_linux:4::es cpe:/o:redhat:enterprise_linux:4::ws cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::client_workstation cpe:/o:redhat:enterprise_linux:5::server