Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 3.1.6 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2987
Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird prior to 6, SeaMonkey 2.x prior to 2.3, and possibly other products might allow remote malicious users to execute arbitrary...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Thunderbird 2.0.0.2Mozilla Thunderbird 1.5.0.9Mozilla Thunderbird 3.0.2Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 3.0.3Mozilla Thunderbird 1.0.2Mozilla Thunderbird 1.0.3Mozilla Thunderbird 3.1.7Mozilla Thunderbird 3.1.3Mozilla Thunderbird 3.0.9Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 2.0.0.7Mozilla Thunderbird 2.0Mozilla Thunderbird 1.5.0.5Mozilla Thunderbird 2.0.0.22Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.7Mozilla Thunderbird 0.9Mozilla Thunderbird 0.1
NA
CVE-2011-3001
Mozilla Firefox 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote malicious users to bypass intended access restrictions via a crafted web si...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Firefox 6.0Mozilla Thunderbird 0.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 1.0.4Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.5.0.10Mozilla Thunderbird 1.5.0.11Mozilla Thunderbird 1.5.0.6Mozilla Thunderbird 1.5.0.7Mozilla Thunderbird 1.7.3Mozilla Thunderbird 2.0Mozilla Thunderbird 2.0.0.15Mozilla Thunderbird 2.0.0.16Mozilla Thunderbird 2.0.0.23Mozilla Thunderbird 2.0.0.3Mozilla Thunderbird 2.0 .12Mozilla Thunderbird 2.0 .13Mozilla Thunderbird 3.0
NA
CVE-2011-3005
Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
Mozilla Firefox 4.0Mozilla Firefox 6.0Mozilla Firefox 5.0Mozilla Firefox 4.0.1Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.8Mozilla Thunderbird 0.9Mozilla Thunderbird 1.0Mozilla Thunderbird 1.0.6Mozilla Thunderbird 1.0.7Mozilla Thunderbird 1.5.0.13Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 1.5.0.9Mozilla Thunderbird 1.5.1Mozilla Thunderbird 2.0.0.1Mozilla Thunderbird 2.0.0.11Mozilla Thunderbird 2.0.0.18Mozilla Thunderbird 2.0.0.19Mozilla Thunderbird 2.0.0.5Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0 .4
NA
CVE-2011-2997
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown...
Mozilla Firefox 6.0Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.8Mozilla Thunderbird 0.9Mozilla Thunderbird 1.0.5Mozilla Thunderbird 1.0.6Mozilla Thunderbird 1.5.0.12Mozilla Thunderbird 1.5.0.13Mozilla Thunderbird 1.5.0.14Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 1.0.2Mozilla Thunderbird 1.0.3Mozilla Thunderbird 1.5Mozilla Thunderbird 1.5.0.1Mozilla Thunderbird 1.5.0.4Mozilla Thunderbird 1.5.0.5Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 1.0
NA
CVE-2011-0061
Buffer overflow in Mozilla Firefox 3.6.x prior to 3.6.14, Thunderbird prior to 3.1.8, and SeaMonkey prior to 2.0.12 might allow remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.
Mozilla Firefox 3.6.8Mozilla Firefox 3.6.10Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.9Mozilla Firefox 3.6.11Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.14Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.18
NA
CVE-2010-3765
Mozilla Firefox 3.5.x up to and including 3.5.14 and 3.6.x up to and including 3.6.11, Thunderbird 3.1.6 prior to 3.1.6 and 3.0.x prior to 3.0.10, and SeaMonkey 2.x prior to 2.0.10, when JavaScript is enabled, allows remote malicious users to execute arbitrary code via vectors re...
Mozilla Firefox 3.5.5Mozilla Firefox 3.5.4Mozilla Firefox 3.5.1Mozilla Firefox 3.5Mozilla Firefox 3.5.7Mozilla Firefox 3.5.6Mozilla Firefox 3.5.12Mozilla Firefox 3.5.11Mozilla Firefox 3.5.10Mozilla Firefox 3.5.9Mozilla Firefox 3.5.8Mozilla Firefox 3.5.14Mozilla Firefox 3.5.13Mozilla Firefox 3.5.3Mozilla Firefox 3.5.2Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.10Mozilla Firefox 3.6.11Mozilla Firefox 3.6.9
NA
CVE-2011-2372
Mozilla Firefox prior to 3.6.23 and 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote malicious users to bypass intended access restrictions ...
Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 3.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.11Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 4.0
NA
CVE-2011-2995
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 3.6.23 and 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly ex...
Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 4.0.1
NA
CVE-2011-3000
Mozilla Firefox prior to 3.6.23 and 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote malicious users to conduc...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 4.0
NA
CVE-2011-3232
YARR, as used in Mozilla Firefox prior to 7.0, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
Mozilla Firefox 3.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.11Mozilla Firefox 3.6.18Mozilla Firefox 3.6.19Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla FirefoxMozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.16Mozilla Firefox 3.6.17Mozilla Firefox 4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook