Skip to content
OpenAdvisories
Unscored DSA-1840-1 9 CVEs

xulrunner - several vulnerabilities

Published Jul 23, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 xulrunner 1.9.0.12-0lenny1

Vulnerabilities 9

  • Unscored —

    The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-2464 Public exploit EPSS 13%

    The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and…

  • Unscored —

    Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption an…

  • Unscored —

    The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of ser…

  • Unscored —

    Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application cr…

  • Unscored —

    Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an …

  • Unscored —

    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service …

  • Unscored —

    The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remot…

  • Unscored —

    Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which…