CVE catalog
CVE-2010-0171
xulrunner - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.77% · Oct 25, 2026
Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | xulrunner | 5.0 | 1.9.0.10-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.11-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.11-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.12-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.12-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.13-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.13-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.14-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.14-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.15-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.16-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.5-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.6-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.7-0lenny1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.7-0lenny2 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.7-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.8-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.9-0lenny2 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.9-1 | vulnerable |
| Debian | xulrunner | 5.0 | 1.9.0.18-1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | xulrunner | deb | 5.0 | 1.9.0.18-1 | Not reported | DSA-1999-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: