PublicDateAtUSN: 2010-06-24 Candidate: CVE-2010-1200 PublicDate: 2010-06-24 12:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200 https://ubuntu.com/security/notices/USN-930-1 https://ubuntu.com/security/notices/USN-943-1 https://ubuntu.com/security/notices/USN-930-4 Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Ubuntu-Description: Notes: jdstrand> CVEs in Firefox are tracked in the xulrunner source packages. The mapping of xulrunner sources to firefox is: xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS xulrunner-1.9: firefox-3.0 xulrunner-1.9.1: firefox-3.5 jdstrand> Ubuntu 6.06 LTS and 10.04 LTS uses the embedded xulrunner and not the system xulrunner-1.9.2, so it is tracked in the firefox source package. Bugs: Priority: low Discovered-by: Assigned-to: chriscoulson CVSS: Patches_firefox: upstream_firefox: needs-triage dapper_firefox: ignored (reached end-of-life) hardy_firefox: ignored (uses system xulrunner) jaunty_firefox: DNE karmic_firefox: DNE lucid_firefox: released (3.6.6+nobinonly-0ubuntu0.10.04.1) maverick_firefox: released (3.6.7+build2+nobinonly-0ubuntu1) natty_firefox: released (3.6.7+build2+nobinonly-0ubuntu1) oneiric_firefox: released (3.6.7+build2+nobinonly-0ubuntu1) devel_firefox: released (3.6.7+build2+nobinonly-0ubuntu1) Patches_xulrunner: upstream_xulrunner: needs-triage dapper_xulrunner: DNE hardy_xulrunner: ignored (reached end-of-life) jaunty_xulrunner: ignored (reached end-of-life) karmic_xulrunner: ignored (reached end-of-life) lucid_xulrunner: DNE maverick_xulrunner: DNE natty_xulrunner: DNE oneiric_xulrunner: DNE devel_xulrunner: DNE Patches_xulrunner-1.9: upstream_xulrunner-1.9: needs-triage dapper_xulrunner-1.9: DNE hardy_xulrunner-1.9: ignored (reverse dependencies no longer process web content) jaunty_xulrunner-1.9: ignored (reverse dependencies no longer process web content) karmic_xulrunner-1.9: DNE lucid_xulrunner-1.9: DNE maverick_xulrunner-1.9: DNE natty_xulrunner-1.9: DNE oneiric_xulrunner-1.9: DNE devel_xulrunner-1.9: DNE Patches_xulrunner-1.9.1: upstream_xulrunner-1.9.1: needs-triage dapper_xulrunner-1.9.1: DNE hardy_xulrunner-1.9.1: DNE jaunty_xulrunner-1.9.1: ignored (use firefox-3.0 instead) karmic_xulrunner-1.9.1: ignored (reverse dependencies no longer process web content) lucid_xulrunner-1.9.1: DNE maverick_xulrunner-1.9.1: DNE natty_xulrunner-1.9.1: DNE oneiric_xulrunner-1.9.1: DNE devel_xulrunner-1.9.1: DNE Patches_xulrunner-1.9.2: upstream_xulrunner-1.9.2: needs-triage dapper_xulrunner-1.9.2: DNE hardy_xulrunner-1.9.2: released (1.9.2.6+nobinonly-0ubuntu0.8.04.1) jaunty_xulrunner-1.9.2: released (1.9.2.7+build2+nobinonly-0ubuntu0.9.04.2) karmic_xulrunner-1.9.2: released (1.9.2.7+build2+nobinonly-0ubuntu0.9.10.2) lucid_xulrunner-1.9.2: released (1.9.2.6+nobinonly-0ubuntu0.10.04.1) maverick_xulrunner-1.9.2: released (1.9.2.7+build2+nobinonly-0ubuntu1) natty_xulrunner-1.9.2: released (1.9.2.7+build2+nobinonly-0ubuntu1) oneiric_xulrunner-1.9.2: DNE devel_xulrunner-1.9.2: DNE Patches_seamonkey: upstream_seamonkey: needs-triage dapper_seamonkey: DNE hardy_seamonkey: released (2.0.8+build1+nobinonly-0ubuntu0.8.04.1) jaunty_seamonkey: released (2.0.8+build1+nobinonly-0ubuntu0.9.04.1) karmic_seamonkey: released (2.0.8+build1+nobinonly-0ubuntu0.9.10.1) lucid_seamonkey: released (2.0.6+build1+nobinonly-0ubuntu0.10.04.1) maverick_seamonkey: released (2.0.6+build1+nobinonly-0ubuntu1) natty_seamonkey: released (2.0.6+build1+nobinonly-0ubuntu1) oneiric_seamonkey: released (2.0.6+build1+nobinonly-0ubuntu1) devel_seamonkey: released (2.0.6+build1+nobinonly-0ubuntu1) Patches_thunderbird: Priority_thunderbird: negligible upstream_thunderbird: released (3.0.5) dapper_thunderbird: DNE hardy_thunderbird: ignored (reached end-of-life) jaunty_thunderbird: ignored (reached end-of-life) karmic_thunderbird: ignored (reached end-of-life) lucid_thunderbird: released (3.0.5+build2+nobinonly-0ubuntu0.10.04.1) maverick_thunderbird: released (3.0.5+build2+nobinonly-0ubuntu1) natty_thunderbird: released (3.0.5+build2+nobinonly-0ubuntu1) oneiric_thunderbird: released (3.0.5+build2+nobinonly-0ubuntu1) devel_thunderbird: released (3.0.5+build2+nobinonly-0ubuntu1)