Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 3.1.11 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3232
YARR, as used in Mozilla Firefox prior to 7.0, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
Mozilla Firefox 3.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.11Mozilla Firefox 3.6.18Mozilla Firefox 3.6.19Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla FirefoxMozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.16Mozilla Firefox 3.6.17Mozilla Firefox 4.0
NA
CVE-2011-2999
Mozilla Firefox prior to 3.6.23 and 4.x through 5, Thunderbird prior to 6.0, and SeaMonkey prior to 2.3 do not properly handle "location" as the name of a frame, which allows remote malicious users to bypass the Same Origin Policy via a crafted web site, a different vul...
Mozilla Firefox 3.6Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 4.0
NA
CVE-2011-3666
Mozilla Firefox prior to 3.6.25 and Thunderbird prior to 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote malicious users to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of a...
Mozilla Firefox 3.6.19Mozilla Firefox 3.6.18Mozilla Firefox 3.6.17Mozilla Firefox 3.6.10Mozilla Firefox 3.6Mozilla FirefoxMozilla Firefox 3.6.23Mozilla Firefox 3.6.16Mozilla Firefox 3.6.15Mozilla Firefox 3.5.9Mozilla Firefox 3.5.8Mozilla Firefox 3.5.15Mozilla Firefox 3.5.14Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0Mozilla Firefox 3.6.3Mozilla Firefox 2.0.0.19Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.7
NA
CVE-2011-3653
Mozilla Firefox prior to 8.0 and Thunderbird prior to 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote malicious users to bypass the Same Origin Policy and read image data via vectors related ...
Mozilla Firefox 6.0.1Mozilla Firefox 6.0Mozilla Firefox 4.0Mozilla Firefox 3.6.24Mozilla Firefox 3.6.18Mozilla Firefox 3.6.6Mozilla Firefox 3.6.22Mozilla Firefox 3.6.2Mozilla Firefox 7.0Mozilla Firefox 6.0.2Mozilla Firefox 3.6.12Mozilla Firefox 3.6.8Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.6.16Mozilla Firefox 3.6.14Mozilla Firefox 3.5.7Mozilla Firefox 3.5.14Mozilla Firefox 3.5.12Mozilla Firefox 3.0.1Mozilla Firefox 3.0.5Mozilla Firefox 3.0.14
NA
CVE-2011-2377
Mozilla Firefox prior to 3.6.18 and 4.x up to and including 4.0.1, Thunderbird prior to 3.1.11, and SeaMonkey up to and including 2.0.14 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a mu...
Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.1.8Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.10Mozilla Seamonkey 2.0.11Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.14Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.5
NA
CVE-2011-3652
The browser engine in Mozilla Firefox prior to 8.0 and Thunderbird prior to 8.0 does not properly allocate memory, which allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.5.9Mozilla Firefox 3.5.3Mozilla Firefox 3.5.6Mozilla Firefox 3.5.7Mozilla Firefox 3.0Mozilla Firefox 3.0.11Mozilla Firefox 3.0.7Mozilla Firefox 3.0.15Mozilla Firefox 2.0.0.13Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.5Mozilla Firefox 1.4.1Mozilla Firefox 1.0.1Mozilla Firefox 1.0.7
NA
CVE-2011-3654
The browser engine in Mozilla Firefox prior to 8.0 and Thunderbird prior to 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execu...
Mozilla Firefox 3.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.5.9Mozilla Firefox 3.5.3Mozilla Firefox 3.5.11Mozilla Firefox 3.5.7Mozilla Firefox 3.5Mozilla Firefox 3.0Mozilla Firefox 3.0.11Mozilla Firefox 3.0.7Mozilla Firefox 3.0.15Mozilla Firefox 3.0.16Mozilla Firefox 2.0.0.20Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.5
NA
CVE-2011-3647
The JSSubScriptLoader in Mozilla Firefox prior to 3.6.24 and Thunderbird prior to 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote malicious users to gain privileges via a crafted web site tha...
Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla Firefox 3.6.22Mozilla FirefoxMozilla Firefox 3.5.11Mozilla Firefox 3.5.3Mozilla Firefox 3.5Mozilla Firefox 3.0.14Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.15Mozilla Firefox 3.0.16Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.5
NA
CVE-2012-3980
The web console in Mozilla Firefox prior to 15.0, Firefox ESR 10.x prior to 10.0.7, Thunderbird prior to 15.0, and Thunderbird ESR 10.x prior to 10.0.7 allows user-assisted remote malicious users to execute arbitrary JavaScript code with chrome privileges via a crafted web site t...
Mozilla Firefox Esr 10.0Mozilla Firefox Esr 10.0.1Mozilla Firefox Esr 10.0.2Mozilla Firefox Esr 10.0.5Mozilla Firefox Esr 10.0.6Mozilla Firefox Esr 10.0.3Mozilla Firefox Esr 10.0.4Mozilla FirefoxMozilla Firefox 12.0Mozilla Firefox 9.0Mozilla Firefox 8.0Mozilla Firefox 5.0Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 3.6.25Mozilla Firefox 3.6.24Mozilla Firefox 3.6.12Mozilla Firefox 3.6.8Mozilla Firefox 3.5.8Mozilla Firefox 10.0.2Mozilla Firefox 10.0Mozilla Firefox 7.0
NA
CVE-2011-2376
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 3.6.18 and Thunderbird prior to 3.1.11 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors...
Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.16Mozilla Firefox 3.0.15Mozilla Firefox 3.0.8Mozilla Firefox 3.0.7Mozilla Firefox 3.0Mozilla Firefox 2.0.0.14Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.4Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.3Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.5.7Mozilla Firefox 1.5.6Mozilla Firefox 1.0.4Mozilla Firefox 1.0.7Mozilla Firefox 3.5.15Mozilla Firefox 3.5.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook