Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 2.0 .9 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-3835
The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox prior to 2.0.0.17, Thunderbird prior to 2.0.0.17, and SeaMonkey prior to 1.1.12 allows remote malicious users to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 1.0Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.7Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.13Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.10Mozilla SeamonkeyMozilla Thunderbird 2.0.0.1Mozilla Firefox 0.8Mozilla Firefox 0.10.1
NA
CVE-2008-4060
Mozilla Firefox prior to 2.0.0.17 and 3.x prior to 3.0.2, Thunderbird prior to 2.0.0.17, and SeaMonkey prior to 1.1.12 allow remote malicious users to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1)...
Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 1.0Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.7Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.13Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.9Mozilla SeamonkeyMozilla Thunderbird 2.0.0.1Mozilla Thunderbird 1.5.1Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 1.0.2
NA
CVE-2009-2535
Mozilla Firefox prior to 2.0.0.19 and 3.x prior to 3.0.5, SeaMonkey, and Thunderbird allow remote malicious users to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2...
Mozilla Firefox 2.0 .5Mozilla Firefox 2.0 .4Mozilla Firefox 2.0 .10Mozilla FirefoxMozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.1Mozilla Firefox 1.5.6Mozilla Firefox 1.5.5Mozilla Firefox 1.5.4Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5Mozilla Firefox 1.0.3Mozilla Firefox 1.0.1Mozilla Firefox 0.9Mozilla Firefox 0.8Mozilla Firefox 0.1Mozilla Firefox 3.0Mozilla Firefox 2.0 .7Mozilla Firefox 2.0 .6
NA
CVE-2011-3647
The JSSubScriptLoader in Mozilla Firefox prior to 3.6.24 and Thunderbird prior to 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote malicious users to gain privileges via a crafted web site tha...
Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla Firefox 3.6.22Mozilla FirefoxMozilla Firefox 3.5.11Mozilla Firefox 3.5.3Mozilla Firefox 3.5Mozilla Firefox 3.0.14Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.15Mozilla Firefox 3.0.16Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.5
NA
CVE-2009-1836
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbi...
Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Thunderbird 2.0.0.11Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.5.0.4Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13
NA
CVE-2009-1838
The garbage-collection implementation in Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote malicious users to execute arbitrary JavaScript w...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.9Mozilla Thunderbird 2.0.0.0Mozilla Thunderbird 2.0.0.16Mozilla Thunderbird 2.0.0.17Mozilla Thunderbird 2.0.0.8Mozilla Thunderbird 2.0.0.9Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 2.0 .9Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.8Mozilla Thunderbird 1.0.4Mozilla Thunderbird 1.5.0.12Mozilla Thunderbird 1.5Mozilla Thunderbird 1.5.0.8Mozilla Thunderbird 1.5.2Mozilla Thunderbird 1.7.1Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9
NA
CVE-2009-1841
js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.9Mozilla Thunderbird 2.0.0.0Mozilla Thunderbird 2.0.0.17Mozilla Thunderbird 2.0.0.18Mozilla Thunderbird 2.0.0.8Mozilla Thunderbird 2.0.0.9Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 2.0 .9Mozilla Thunderbird 2.0 8Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.8Mozilla Thunderbird 1.0.4Mozilla Thunderbird 1.5Mozilla Thunderbird 1.5.0.1Mozilla Thunderbird 1.5.0.8Mozilla Thunderbird 1.5.2Mozilla Thunderbird 1.7.1Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.10
NA
CVE-2009-1832
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame constructi...
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0Mozilla Firefox 3.0.9Mozilla Thunderbird 2.0.0.15Mozilla Thunderbird 2.0.0.16Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0.0.7Mozilla Thunderbird 2.0 .5Mozilla Thunderbird 2.0 .6Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 1.0.1Mozilla Thunderbird 1.0.3Mozilla Thunderbird 1.0.8Mozilla Thunderbird 1.5.0.12Mozilla Thunderbird 1.5.0.5Mozilla Thunderbird 1.5.0.9Mozilla Thunderbird 1.5.0.7Mozilla Thunderbird 1.5.0.2Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.8
NA
CVE-2009-1833
The JavaScript engine in Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1...
Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Thunderbird 2.0.0.12Mozilla Thunderbird 2.0.0.13Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 2.0 .14Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.0.6Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.3Mozilla Thunderbird 1.5.0.4Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.12
NA
CVE-2011-3648
Cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.6.24 and 4.x up to and including 7.0 and Thunderbird prior to 3.1.6 and 5.0 up to and including 7.0 allows remote malicious users to inject arbitrary web script or HTML via crafted text with Shift JIS encoding...
Mozilla Firefox 3.6Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.19Mozilla Firefox 3.5.14Mozilla Firefox 3.5.12Mozilla Firefox 3.5.2Mozilla Firefox 3.5.5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.3Mozilla Firefox 3.0.17Mozilla Firefox 3.0.4Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.5.13Mozilla Firefox 3.5.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook