firefox-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
productUSA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
critical
by severity
0critical6high6medium0low
updated 2026-10-30
01
vulnerabilities (12)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2012-0470US | high10.0 | — | ||||
Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11… | ||||||
| CVE-2012-0469US | high10.0 | — | ||||
Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thund… | ||||||
| CVE-2012-0467US | high10.0 | — | ||||
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x b… | ||||||
| CVE-2012-0468US | high10.0 | — | ||||
The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failu… | ||||||
| CVE-2012-0472US | high9.3 | — | ||||
The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey… | ||||||
| CVE-2012-0478US | high9.3 | — | ||||
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before… | ||||||
| CVE-2012-0479US | medium4.3 | — | ||||
Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers… | ||||||
| CVE-2012-0477US | medium4.3 | — | ||||
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 1… | ||||||
| CVE-2012-0471US | medium4.3 | — | ||||
Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and… | ||||||
| CVE-2012-0474US | medium4.3 | — | ||||
Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbi… | ||||||
| CVE-2011-3062US | medium6.8 | — | ||||
Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via… | ||||||
| CVE-2012-0473US | medium5.0 | — | ||||
The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-189CWE-1891 CVEs
- CWE-193Off-by-one Error1 CVEs
- CWE-264CWE-2641 CVEs
- CWE-399CWE-3991 CVEs
- CWE-416Use After Free1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USRed Hat Product Security (CSAF)12 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan