Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability

Bugtraq ID:	44250
Class:	Unknown
CVE:	CVE-2010-3181
Remote:	Yes
Local:	No
Published:	Oct 19 2010 12:00AM
Updated:	Apr 13 2015 09:59PM
Credit:	Ehsan Akhgari
Vulnerable:	Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux -current Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 3.1.3 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.1 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 3.0 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla Firefox 3.6.10 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Firefox 3.5.10 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.8 Mozilla Firefox 3.5.7 Mozilla Firefox 3.5.6 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6 Mozilla Firefox 3.5.12 Mozilla Firefox 3.5.11
Not Vulnerable:	Mozilla Thunderbird 3.1.5 Mozilla Thunderbird 3.0.9 Mozilla SeaMonkey 2.0.9 Mozilla Firefox 3.5.14 Mozilla Firefox 3.6.11

Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Slackware Linux x86_64 -current

• Slackware mozilla-firefox-3.6.11-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ xap/mozilla-firefox-3.6.11-x86_64-1.txz


• Slackware mozilla-thunderbird-3.1.5-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ xap/mozilla-thunderbird-3.1.5-x86_64-1.txz


• Slackware seamonkey-2.0.9-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ xap/seamonkey-2.0.9-x86_64-1.txz


• Slackware seamonkey-solibs-2.0.9-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ l/seamonkey-solibs-2.0.9-x86_64-1.txz

Slackware Linux -current

• Slackware mozilla-thunderbird-3.1.5-i686-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/ mozilla-thunderbird-3.1.5-i686-1.txz


• Slackware seamonkey-2.0.9-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/ seamonkey-2.0.9-i486-1.txz


• Slackware seamonkey-solibs-2.0.9-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/se amonkey-solibs-2.0.9-i486-1.txz

Slackware Linux 12.2

• Slackware seamonkey-2.0.9-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packagess /seamonkey-2.0.9-i486-1_slack12.2.tgz


• Slackware seamonkey-solibs-2.0.9-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packagess /seamonkey-solibs-2.0.9-i486-1_slack12.2.tgz

Slackware Linux 13.1 x86_64

• Slackware mozilla-firefox-3.6.11-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/mozilla-firefox-3.6.11-x86_64-1_slack13.1.txz


• Slackware mozilla-thunderbird-3.0.9-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/mozilla-thunderbird-3.0.9-x86_64-1.txz


• Slackware seamonkey-2.0.9-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package ss/seamonkey-2.0.9-x86_64-1_slack13.1.txz


• Slackware seamonkey-solibs-2.0.9-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package ss/seamonkey-solibs-2.0.9-x86_64-1_slack13.1.txz

Slackware Linux 13.1

• Slackware mozilla-thunderbird-3.0.9-i686-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ mozilla-thunderbird-3.0.9-i686-1.txz


• Slackware seamonkey-2.0.9-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packagess /seamonkey-2.0.9-i486-1_slack13.1.txz


• Slackware seamonkey-solibs-2.0.9-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packagess /seamonkey-solibs-2.0.9-i486-1_slack13.1.txz

Slackware Linux 13.0 x86_64

• Slackware mozilla-firefox-3.6.11-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/mozilla-firefox-3.6.11-x86_64-1_slack13.0.txz


• Slackware seamonkey-2.0.9-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package ss/seamonkey-2.0.9-x86_64-1_slack13.0.txz


• Slackware seamonkey-solibs-2.0.9-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package ss/seamonkey-solibs-2.0.9-x86_64-1_slack13.0.txz

Slackware Linux 13.0

• Slackware mozilla-firefox-3.6.11-i686-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ mozilla-firefox-3.6.11-i686-1.txz


• Slackware seamonkey-2.0.9-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packagess /seamonkey-2.0.9-i486-1_slack13.0.txz


• Slackware seamonkey-solibs-2.0.9-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packagess /seamonkey-solibs-2.0.9-i486-1_slack13.0.txz