CVE catalog

CVE-2010-0183

xulrunner - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.95% · Oct 25, 2026

Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxulrunner5.01.9.0.10-1vulnerable
Debianxulrunner5.01.9.0.11-0lenny1vulnerable
Debianxulrunner5.01.9.0.11-1vulnerable
Debianxulrunner5.01.9.0.12-0lenny1vulnerable
Debianxulrunner5.01.9.0.12-1vulnerable
Debianxulrunner5.01.9.0.13-0lenny1vulnerable
Debianxulrunner5.01.9.0.13-1vulnerable
Debianxulrunner5.01.9.0.14-0lenny1vulnerable
Debianxulrunner5.01.9.0.14-1vulnerable
Debianxulrunner5.01.9.0.15-0lenny1vulnerable
Debianxulrunner5.01.9.0.16-1vulnerable
Debianxulrunner5.01.9.0.18-1vulnerable
Debianxulrunner5.01.9.0.19-1vulnerable
Debianxulrunner5.01.9.0.5-1vulnerable
Debianxulrunner5.01.9.0.6-1vulnerable
Debianxulrunner5.01.9.0.7-0lenny1vulnerable
Debianxulrunner5.01.9.0.7-0lenny2vulnerable
Debianxulrunner5.01.9.0.7-1vulnerable
Debianxulrunner5.01.9.0.8-1vulnerable
Debianxulrunner5.01.9.0.9-0lenny2vulnerable
Debianxulrunner5.01.9.0.9-1vulnerable
Debianxulrunner5.01.9.0.19-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxulrunnerdeb5.01.9.0.19-2Not reportedDSA-2064-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References