--- title: "CVE-2010-3167\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2010-3167?format=md keywords: index, follow --- # CVE-2010-3167 Publication date 7 September 2010 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability." [Read the notes from the security team](https://ubuntu.com/security/CVE-2010-3167?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 11.04 natty | Fixed 3.6.9+build1+nobinonly-0ubuntu1 | | 10.10 maverick | Fixed 3.6.9+build1+nobinonly-0ubuntu1 | | 10.04 LTS lucid | Fixed 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Not in release | | 9.04 jaunty | Not in release | | 8.04 LTS hardy | Ignored end of life | | 6.06 LTS dapper | Ignored end of life | | firefox-3.0 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Not in release | | 9.04 jaunty | Fixed 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | | firefox-3.5 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Fixed 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 | | 9.04 jaunty | Fixed 3.5.12+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | seamonkey | 11.04 natty | Fixed 2.0.7+build1+nobinonly-0ubuntu1 | | 10.10 maverick | Fixed 2.0.7+build1+nobinonly-0ubuntu1 | | 10.04 LTS lucid | Fixed 2.0.7+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Fixed 2.0.8+build1+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 2.0.8+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 2.0.8+build1+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | | thunderbird | 11.04 natty | Fixed 3.1.3+build1+nobinonly-0ubuntu1 | | 10.10 maverick | Fixed 3.1.3+build1+nobinonly-0ubuntu1 | | 10.04 LTS lucid | Fixed 3.0.7+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Ignored end of life | | 9.04 jaunty | Ignored end of life | | 8.04 LTS hardy | Ignored end of life | | 6.06 LTS dapper | Not in release | | xulrunner-1.9.1 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Fixed 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 | | 9.04 jaunty | Fixed 1.9.1.12+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | xulrunner-1.9.2 | 11.04 natty | Fixed 1.9.2.9+build1+nobinonly-0ubuntu1 | | 10.10 maverick | Fixed 1.9.2.9+build1+nobinonly-0ubuntu1 | | 10.04 LTS lucid | Fixed 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Fixed 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) CVEs in Firefox are tracked in the xulrunner source packages for builds that use the system xulrunner, and firefox source packages for those that use a static build xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS (system xul) xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS (system xul) xulrunner-1.9: (ignored) reverse dependencies no longer process web content xulrunner-1.9.1: (ignored) reverese dependencies no longer process web content xulrunner-1.9.2: system xul for reverese dependencies that process web content firefox: Ubuntu 6.06 LTS (static build) firefox: Ubuntu 10.04 LTS and higher (static build of 3.6.x or higher) firefox-3.0: Ubuntu 8.04 LTS, 9.04 (static build of 3.6.x) firefox-3.5: Ubuntu 9.04 (ignored, uses system xul 1.9.1. Use 3.0 instead) firefox-3.5: Ubuntu 9.10 (static build of 3.6.x) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3167) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2010-3167) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2010-3167) * [Debian](https://security-tracker.debian.org/tracker/CVE-2010-3167) ### Related Ubuntu Security Notices (USN) + [USN-975-1](https://usn.ubuntu.com/USN-975-1) + Firefox and Xulrunner vulnerabilities + 8 September 2010 + [USN-978-1](https://usn.ubuntu.com/USN-978-1) + Thunderbird vulnerabilities + 8 September 2010 ### Other references *