Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla thunderbird 1.5.0.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3000
Mozilla Firefox prior to 3.6.23 and 4.x through 6, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote malicious users to conduc...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 4.0
NA
CVE-2011-3232
YARR, as used in Mozilla Firefox prior to 7.0, Thunderbird prior to 7.0, and SeaMonkey prior to 2.4, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
Mozilla Firefox 3.6Mozilla Firefox 3.6.10Mozilla Firefox 3.6.11Mozilla Firefox 3.6.18Mozilla Firefox 3.6.19Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.12Mozilla Firefox 3.6.13Mozilla Firefox 3.6.20Mozilla Firefox 3.6.21Mozilla Firefox 3.6.6Mozilla Firefox 3.6.7Mozilla Firefox 3.6.14Mozilla Firefox 3.6.15Mozilla FirefoxMozilla Firefox 3.6.8Mozilla Firefox 3.6.9Mozilla Firefox 3.6.16Mozilla Firefox 3.6.17Mozilla Firefox 4.0
NA
CVE-2011-2999
Mozilla Firefox prior to 3.6.23 and 4.x through 5, Thunderbird prior to 6.0, and SeaMonkey prior to 2.3 do not properly handle "location" as the name of a frame, which allows remote malicious users to bypass the Same Origin Policy via a crafted web site, a different vul...
Mozilla Firefox 3.6Mozilla Firefox 3.6.9Mozilla Firefox 3.6.10Mozilla Firefox 3.6.17Mozilla Firefox 3.6.18Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.13Mozilla Firefox 3.6.14Mozilla Firefox 3.6.21Mozilla FirefoxMozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.11Mozilla Firefox 3.6.12Mozilla Firefox 3.6.19Mozilla Firefox 3.6.20Mozilla Firefox 3.6.7Mozilla Firefox 3.6.8Mozilla Firefox 3.6.15Mozilla Firefox 3.6.16Mozilla Firefox 4.0
NA
CVE-2010-2760
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 might allow remote malicious users to execute arbitrary code via vectors inv...
Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0a1preMozilla Seamonkey 2.0.5Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.1.18
NA
CVE-2010-2764
Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote malicious users to discover t...
Mozilla Firefox 3.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.19Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.9Mozilla Seamonkey 1.1Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0a1preMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1
NA
CVE-2010-2765
Integer overflow in the FRAMESET element implementation in Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 might allow remote malicious users to execute arbitrary code via a large number o...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.6Mozilla Firefox 3.6.8Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1Mozilla Seamonkey 1.5.0.10Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0a1preMozilla Seamonkey 2.0.5Mozilla SeamonkeyMozilla Seamonkey 1.0.1
NA
CVE-2010-2766
The normalizeDocument function in Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote malicious...
Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.1.7Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.13
NA
CVE-2010-2767
The navigator.plugins implementation in Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote malicious use...
Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.16Mozilla Seamonkey 1.1.5Mozilla Seamonkey 1.1.6Mozilla Seamonkey 1.5.0.8Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9
NA
CVE-2010-2768
Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote malicious user...
Mozilla Firefox 3.6.7Mozilla Firefox 3.6Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.8Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.18Mozilla Seamonkey 1.1.19Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1.9Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13
NA
CVE-2010-2769
Cross-site scripting (XSS) vulnerability in Mozilla Firefox prior to 3.5.12 and 3.6.x prior to 3.6.9, Thunderbird prior to 3.0.7 and 3.1.x prior to 3.1.3, and SeaMonkey prior to 2.0.7 allows user-assisted remote malicious users to inject arbitrary web script or HTML via a selecti...
Mozilla Firefox 3.6Mozilla Firefox 3.6.4Mozilla Firefox 3.6.6Mozilla Firefox 3.6.8Mozilla Firefox 3.6.7Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.19Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0a1preMozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook