Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla thunderbird vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2

CVE-2011-2364

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.18 and Thunderbird prior to 3.1.11 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a ...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2011-2365

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.18 and Thunderbird prior to 3.1.11 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a ...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2011-2992

The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x prior to 2.3, Thunderbird prior to 6, and possibly other products allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrar...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0.5Mozilla Seamonkey 2.0.6Mozilla Seamonkey 2.0.7Mozilla Seamonkey 2.0.8
4.3
CVSSv2

CVE-2008-6961

mailnews in Mozilla Thunderbird prior to 2.0.0.18 and SeaMonkey prior to 1.1.13, when JavaScript is enabled in mail, allows remote malicious users to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2)...
Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.0.99
9.3
CVSSv2

CVE-2006-0884

The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and previous versions allows user-assisted malicious users to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI i...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2008-4070

Heap-based buffer overflow in Mozilla Thunderbird prior to 2.0.0.17 and SeaMonkey prior to 1.1.12 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] ...
Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.0.99
10
CVSSv2

CVE-2011-2985

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird prior to 6, SeaMonkey 2.x prior to 2.3, and possibly other products allow remote malicious users to cause a denial of service (memory corruption and application crash) or poss...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0.5Mozilla Seamonkey 2.0.6Mozilla Seamonkey 2.0.7Mozilla Seamonkey 2.0.8
10
CVSSv2

CVE-2011-2989

The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x prior to 2.3, Thunderbird prior to 6, and possibly other products does not properly implement WebGL, which allows remote malicious users to cause a denial of service (memory corruption and application crash) or po...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0.5Mozilla Seamonkey 2.0.6Mozilla Seamonkey 2.0.7Mozilla Seamonkey 2.0.8
10
CVSSv2

CVE-2011-2991

The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x prior to 2.3, Thunderbird prior to 6, and possibly other products does not properly implement JavaScript, which allows remote malicious users to cause a denial of service (memory corruption and application crash) ...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1
9.3
CVSSv2

CVE-2007-1282

Integer overflow in Mozilla Thunderbird prior to 1.5.0.10 and SeaMonkey prior to 1.0.8 allows remote malicious users to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.
Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.7Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
XML external entityremote code executionCVE-2024-44136CVE-2025-21321CVE-2024-41454CVE-2024-55503insecure direct object referenceCVE-2025-20088CVE-2024-44243
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook