CVE catalog

CVE-2010-1202

xulrunner - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.71% · Oct 25, 2026

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxulrunner5.01.9.0.10-1vulnerable
Debianxulrunner5.01.9.0.11-0lenny1vulnerable
Debianxulrunner5.01.9.0.11-1vulnerable
Debianxulrunner5.01.9.0.12-0lenny1vulnerable
Debianxulrunner5.01.9.0.12-1vulnerable
Debianxulrunner5.01.9.0.13-0lenny1vulnerable
Debianxulrunner5.01.9.0.13-1vulnerable
Debianxulrunner5.01.9.0.14-0lenny1vulnerable
Debianxulrunner5.01.9.0.14-1vulnerable
Debianxulrunner5.01.9.0.15-0lenny1vulnerable
Debianxulrunner5.01.9.0.16-1vulnerable
Debianxulrunner5.01.9.0.18-1vulnerable
Debianxulrunner5.01.9.0.19-1vulnerable
Debianxulrunner5.01.9.0.5-1vulnerable
Debianxulrunner5.01.9.0.6-1vulnerable
Debianxulrunner5.01.9.0.7-0lenny1vulnerable
Debianxulrunner5.01.9.0.7-0lenny2vulnerable
Debianxulrunner5.01.9.0.7-1vulnerable
Debianxulrunner5.01.9.0.8-1vulnerable
Debianxulrunner5.01.9.0.9-0lenny2vulnerable
Debianxulrunner5.01.9.0.9-1vulnerable
Debianxulrunner5.01.9.0.19-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxulrunnerdeb5.01.9.0.19-2Not reportedDSA-2064-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References