Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 24.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2014-1539
Mozilla Firefox prior to 30.0 and Thunderbird up to and including 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote malicious users to conduct clickjacking attacks via JavaScript code that...
Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.2Mozilla Thunderbird 24.1.1Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.4Mozilla Thunderbird 24.3
10
CVSSv2
CVE-2014-1551
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 on Windows allows remote malicious users to execute arbitrary code via crafted use of fonts in MathML content, leading to im...
Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1
4.3
CVSSv2
CVE-2014-1559
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-...
Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla FirefoxMozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4
4.3
CVSSv2
CVE-2014-1560
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla ThunderbirdMozilla Thunderbird 24.6Mozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla FirefoxMozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1
9.3
CVSSv2
CVE-2014-1549
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 does not properly allocate Web Audio buffer memory, which allows remote malicious users to execute arbitrary code or cause a denial of servic...
Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla Firefox
10
CVSSv2
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox
5.8
CVSSv2
CVE-2014-1552
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote malicious users to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3
4.3
CVSSv2
CVE-2014-1558
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-...
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1
10
CVSSv2
CVE-2014-1548
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1
10
CVSSv2
CVE-2014-1547
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbit...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook