--- title: "CVE-2010-3176\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2010-3176?format=md keywords: index, follow --- # CVE-2010-3176 Publication date 19 October 2010 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. [Read the notes from the security team](https://ubuntu.com/security/CVE-2010-3176?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 11.04 natty | Fixed 3.6.11+build3+nobinonly-0ubuntu0.10.10.1 | | 10.10 maverick | Fixed 3.6.11+build3+nobinonly-0ubuntu0.10.10.1 | | 10.04 LTS lucid | Fixed 3.6.11+build3+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Not in release | | 9.04 jaunty | Not in release | | 8.04 LTS hardy | Ignored end of life | | 6.06 LTS dapper | Ignored end of life | | firefox-3.0 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Not in release | | 9.04 jaunty | Fixed 3.6.11+build3+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 3.6.11+build3+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | | firefox-3.5 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Fixed 3.6.11+build3+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 3.5.14+build3+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | seamonkey | 11.04 natty | Fixed 2.0.9+build1+nobinonly-0ubuntu0.10.10.1 | | 10.10 maverick | Fixed 2.0.9+build1+nobinonly-0ubuntu0.10.10.1 | | 10.04 LTS lucid | Fixed 2.0.9+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Fixed 2.0.9+build1+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 2.0.9+build1+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 2.0.9+build1+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | | thunderbird | 11.04 natty | Fixed 3.1.5+build1+nobinonly-0ubuntu0.10.10.1 | | 10.10 maverick | Fixed 3.1.5+build1+nobinonly-0ubuntu0.10.10.1 | | 10.04 LTS lucid | Fixed 3.0.9+build1+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Ignored end of life | | 9.04 jaunty | Ignored end of life | | 8.04 LTS hardy | Ignored end of life | | 6.06 LTS dapper | Not in release | | xulrunner-1.9.1 | 11.04 natty | Not in release | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 9.10 karmic | Fixed 1.9.1.14+build4+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 1.9.1.14+build4+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Not in release | | 6.06 LTS dapper | Not in release | | xulrunner-1.9.2 | 11.04 natty | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.10.10.1 | | 10.10 maverick | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.10.10.1 | | 10.04 LTS lucid | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.10.04.1 | | 9.10 karmic | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.9.10.1 | | 9.04 jaunty | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.9.04.1 | | 8.04 LTS hardy | Fixed 1.9.2.11+build3+nobinonly-0ubuntu0.8.04.1 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) CVEs in Firefox are tracked in the xulrunner source packages for builds that use the system xulrunner, and firefox source packages for those that use a static build xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS (system xul) xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS (system xul) xulrunner-1.9: (ignored) reverse dependencies no longer process web content xulrunner-1.9.1: (ignored) reverese dependencies no longer process web content xulrunner-1.9.2: system xul for reverese dependencies that process web content firefox: Ubuntu 6.06 LTS (static build) firefox: Ubuntu 10.04 LTS and higher (static build of 3.6.x or higher) firefox-3.0: Ubuntu 8.04 LTS, 9.04 (static build of 3.6.x) firefox-3.5: Ubuntu 9.04 (ignored, uses system xul 1.9.1. Use 3.0 instead) firefox-3.5: Ubuntu 9.10 (static build of 3.6.x) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2010-3176) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2010-3176) * [Debian](https://security-tracker.debian.org/tracker/CVE-2010-3176) ### Related Ubuntu Security Notices (USN) + [USN-998-1](https://usn.ubuntu.com/USN-998-1) + Thunderbird vulnerabilities + 20 October 2010 + [USN-997-1](https://usn.ubuntu.com/USN-997-1) + Firefox and Xulrunner vulnerabilities + 20 October 2010 ### Other references *