Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 24.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-1551
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 on Windows allows remote malicious users to execute arbitrary code via crafted use of fonts in MathML content, leading to im...
Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1
NA
CVE-2014-1539
Mozilla Firefox prior to 30.0 and Thunderbird up to and including 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote malicious users to conduct clickjacking attacks via JavaScript code that...
Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.2Mozilla Thunderbird 24.1.1Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.4Mozilla Thunderbird 24.3
NA
CVE-2014-1548
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1
NA
CVE-2014-1549
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 does not properly allocate Web Audio buffer memory, which allows remote malicious users to execute arbitrary code or cause a denial of servic...
Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla Firefox
NA
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox
NA
CVE-2014-1552
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote malicious users to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3
NA
CVE-2014-1558
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-...
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1
NA
CVE-2014-1559
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-...
Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla FirefoxMozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4
NA
CVE-2014-1560
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla ThunderbirdMozilla Thunderbird 24.6Mozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla FirefoxMozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1
NA
CVE-2014-1555
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allows remote malicious users to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.1Mozilla Firefox Esr 24.2Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.5Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook