Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird esr 17.0.7 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-25193
hb-ot-layout-gsubgpos.hh in HarfBuzz up to and including 6.0.0 allows malicious users to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
Harfbuzz Project HarfbuzzFedoraproject Fedora 36
NA
CVE-2015-0831
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox prior to 36.0, Firefox ESR 31.x prior to 31.5, and Thunderbird prior to 31.5 allows remote malicious users to execute arbitrary code or cause a denial of service (...
Mozilla ThunderbirdMozilla Thunderbird 31.3Mozilla Thunderbird 31.0Mozilla Thunderbird 31.2Mozilla Thunderbird 31.1.2Mozilla Firefox 33.0Mozilla Firefox 32.0Mozilla Firefox 3.6.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.3Mozilla Firefox 3.6.22Mozilla Firefox 3.6.21Mozilla Firefox 3.6.15Mozilla Firefox 3.6.14Mozilla Firefox 3.5.7Mozilla Firefox 3.5.6Mozilla Firefox 3.5.17Mozilla Firefox 3.5.16Mozilla Firefox 3.5.1Mozilla Firefox 3.5Mozilla Firefox 3.0.2Mozilla Firefox 3.0.19
NA
CVE-2015-0827
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox prior to 36.0, Firefox ESR 31.x prior to 31.5, and Thunderbird prior to 31.5 allows remote malicious users to obtain sensitive information from uninitialized process memory via a malformed SVG gr...
Mozilla Firefox 30.0Mozilla Firefox 3.6.9Mozilla Firefox 3.6.27Mozilla Firefox 3.6.26Mozilla Firefox 3.6.19Mozilla Firefox 3.6.18Mozilla Firefox 3.6.11Mozilla Firefox 3.6.10Mozilla Firefox 3.5.4Mozilla Firefox 3.5.3Mozilla Firefox 3.5.13Mozilla Firefox 3.5.12Mozilla Firefox 3.0.7Mozilla Firefox 3.0.6Mozilla Firefox 3.0.17Mozilla Firefox 3.0.16Mozilla Firefox 3.0Mozilla Firefox 29.0.1Mozilla Firefox 25.0Mozilla Firefox 24.1.1Mozilla Firefox 20.0.1Mozilla Firefox 20.0
NA
CVE-2015-0833
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox prior to 36.0, Firefox ESR 31.x prior to 31.5, and Thunderbird prior to 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) t...
Opensuse Evergreen 11.4Opensuse Opensuse 13.2Opensuse Opensuse 13.1Mozilla Firefox 31.1.0Mozilla Firefox 31.0Mozilla Firefox 3.6.3Mozilla Firefox 3.6.28Mozilla Firefox 3.6.20Mozilla Firefox 3.6.2Mozilla Firefox 3.6.13Mozilla Firefox 3.6.12Mozilla Firefox 3.5.6Mozilla Firefox 3.5.5Mozilla Firefox 3.5.15Mozilla Firefox 3.5.14Mozilla Firefox 3.0.9Mozilla Firefox 3.0.8Mozilla Firefox 3.0.19Mozilla Firefox 3.0.18Mozilla Firefox 3.0.10Mozilla Firefox 3.0.1Mozilla Firefox 33.0
NA
CVE-2015-0836
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 36.0, Firefox ESR 31.x prior to 31.5, and Thunderbird prior to 31.5 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbit...
Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.4Mozilla Thunderbird 31.2Mozilla Thunderbird 31.1.2Mozilla Thunderbird 31.0Mozilla ThunderbirdMozilla Thunderbird 31.3Mozilla Firefox 31.0Mozilla Firefox 30.0Mozilla Firefox 3.6.28Mozilla Firefox 3.6.27Mozilla Firefox 3.6.2Mozilla Firefox 3.6.19Mozilla Firefox 3.6.12Mozilla Firefox 3.6.11Mozilla Firefox 3.5.5Mozilla Firefox 3.5.4
NA
CVE-2015-0822
The Form Autocompletion feature in Mozilla Firefox prior to 36.0, Firefox ESR 31.x prior to 31.5, and Thunderbird prior to 31.5 allows remote malicious users to read arbitrary files via crafted JavaScript code.
Mozilla Firefox 32.0Mozilla Firefox 31.1.0Mozilla Firefox 3.6.4Mozilla Firefox 3.6.3Mozilla Firefox 3.6.22Mozilla Firefox 3.6.21Mozilla Firefox 3.6.14Mozilla Firefox 3.6.13Mozilla Firefox 3.5.7Mozilla Firefox 3.5.6Mozilla Firefox 3.5.17Mozilla Firefox 3.5.16Mozilla Firefox 3.5Mozilla Firefox 3.0.9Mozilla Firefox 3.0.2Mozilla FirefoxMozilla Firefox 3.6.9Mozilla Firefox 3.6.8Mozilla Firefox 3.6.26Mozilla Firefox 3.6.25Mozilla Firefox 3.6.18Mozilla Firefox 3.6.17
NA
CVE-2014-2018
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x up to and including 17.0.8, Thunderbird ESR 17.x up to and including 17.0.10, and SeaMonkey prior to 2.20 allows user-assisted remote malicious users to inject arbitrary web script or HTML via an e-mail message ...
Mozilla Thunderbird Esr 17.0.1Mozilla Thunderbird Esr 17.0.2Mozilla Thunderbird Esr 17.0.3Mozilla Thunderbird Esr 17.0.4Mozilla Thunderbird Esr 17.0.5Mozilla Thunderbird Esr 17.0.10Mozilla Thunderbird Esr 17.0.8Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.6Mozilla Thunderbird Esr 17.0.7Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.7Mozilla Thunderbird 17.0.8Mozilla Thunderbird 17.0.5Mozilla Thunderbird 17.0.6Mozilla SeamonkeyMozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5
NA
CVE-2013-5607
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) prior to 4.10.2, as used in Firefox prior to 25.0.1, Firefox ESR 17.x prior to 17.0.11 and 24.x prior to 24.1.1, and SeaMonkey prior to 2.22.1, allows remote malicious users to cause a d...
Mozilla Netscape Portable Runtime 4.9.6Mozilla Netscape Portable Runtime 4.9.5Mozilla Netscape Portable Runtime 4.8.8Mozilla Netscape Portable Runtime 4.8.7Mozilla Netscape Portable RuntimeMozilla Netscape Portable Runtime 4.10Mozilla Netscape Portable Runtime 4.9Mozilla Netscape Portable Runtime 4.8.9Mozilla Netscape Portable Runtime 4.8.2Mozilla Netscape Portable Runtime 4.8Mozilla Netscape Portable Runtime 4.9.2Mozilla Netscape Portable Runtime 4.9.1Mozilla Netscape Portable Runtime 4.8.4Mozilla Netscape Portable Runtime 4.8.3Mozilla Netscape Portable Runtime 4.7.2Mozilla Netscape Portable Runtime 4.7.1Mozilla Netscape Portable Runtime 4.7Mozilla Netscape Portable Runtime 4.6.2Mozilla Netscape Portable Runtime 4.6.1Mozilla Netscape Portable Runtime 4.1.2Mozilla Netscape Portable Runtime 4.1.1Mozilla Netscape Portable Runtime 4.7.6
NA
CVE-2013-5590
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to 17.0.10, and SeaMonkey prior to 2.22 allow remote malicious users to cau...
Mozilla Seamonkey 2.14Mozilla Seamonkey 2.13Mozilla Seamonkey 2.12Mozilla Seamonkey 2.11Mozilla Seamonkey 2.1Mozilla Seamonkey 2.0.9Mozilla Seamonkey 2.0.8Mozilla Seamonkey 2.0.14Mozilla Seamonkey 2.0.13Mozilla Seamonkey 2.0Mozilla Seamonkey 2.20Mozilla Seamonkey 2.19Mozilla Seamonkey 2.17.1Mozilla Seamonkey 2.17Mozilla Seamonkey 2.16Mozilla Seamonkey 2.15Mozilla Seamonkey 2.21Mozilla Seamonkey 2.10.1Mozilla Seamonkey 2.0.7Mozilla Seamonkey 2.0.6Mozilla Seamonkey 2.0.12Mozilla Seamonkey 2.0.11
NA
CVE-2013-5591
Unspecified vulnerability in the browser engine in Mozilla Firefox prior to 25.0, Firefox ESR 24.x prior to 24.1, Thunderbird prior to 24.1, and SeaMonkey prior to 2.22 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibl...
Mozilla Firefox 19.0Mozilla Firefox 22.0Mozilla FirefoxMozilla Firefox 20.0Mozilla Firefox 23.0.1Mozilla Firefox 21.0Mozilla Firefox 20.0.1Mozilla Firefox 19.0.2Mozilla Firefox 19.0.1Mozilla Firefox 23.0Mozilla Thunderbird 24.0Mozilla ThunderbirdMozilla Thunderbird 17.0.7Mozilla Thunderbird 17.0.8Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2Mozilla Thunderbird Esr 17.0.9Mozilla Thunderbird 17.0.5Mozilla Thunderbird 17.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook