--- title: "CVE-2006-3810\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-3810?format=md keywords: index, follow --- # CVE-2006-3810 Publication date 27 July 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 | | firefox-granparadiso | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | lightning-sunbird | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | midbrowser | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | mozilla-thunderbird | 7.04 feisty | Fixed 1.5.0.13-0ubuntu0.7.04 | | 6.10 edgy | Fixed 1.5.0.13-0ubuntu0.6.10 | | 6.06 LTS dapper | Fixed 1.5.0.13-0ubuntu0.6.06 | | xulrunner | 7.04 feisty | Fixed 1.8.0.5-4.2 | | 6.10 edgy | Fixed 1.8.0.5-4.2 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3810) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-3810) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-3810) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-3810) ### Related Ubuntu Security Notices (USN) + [USN-327-1](https://usn.ubuntu.com/USN-327-1) + firefox vulnerabilities + 28 July 2006 + [USN-350-1](https://usn.ubuntu.com/USN-350-1) + Thunderbird vulnerabilities + 22 September 2006 + [USN-329-1](https://usn.ubuntu.com/USN-329-1) + Thunderbird vulnerabilities + 29 July 2006 ### Other references *