Skip to content
OpenAdvisories
Unscored DSA-2075-1 9 CVEs

xulrunner - several vulnerabilities

Published Jul 27, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 xulrunner 1.9.0.19-3

Vulnerabilities 9

  • Unscored —

    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and Se…

  • Unscored —

    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and …

  • Unscored —
    CVE-2010-1205 Public exploit EPSS 43%

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, migh…

  • Unscored —

    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x …

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.…

  • Unscored —
    CVE-2010-1214 Public exploit

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remo…

  • Unscored —

    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 a…

  • Unscored —

    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.…

  • Unscored —

    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.…