Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla thunderbird 1.5.0.4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2008-3835

The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox prior to 2.0.0.17, Thunderbird prior to 2.0.0.17, and SeaMonkey prior to 1.1.12 allows remote malicious users to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
Mozilla FirefoxMozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Firefox 0.9 RcMozilla Firefox 0.10Mozilla Firefox 0.10.1Mozilla Firefox 1.0Mozilla Firefox 1.0.1Mozilla Firefox 1.0.2
5
CVSSv2

CVE-2008-5012

Mozilla Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote malicious users to bypass the same origin policy and access...
Mozilla FirefoxMozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Firefox 0.9 RcMozilla Firefox 0.10Mozilla Firefox 0.10.1Mozilla Firefox 1.0Mozilla Firefox 1.0.1Mozilla Firefox 1.0.2
5
CVSSv2

CVE-2009-1302

The browser engine in Mozilla Firefox 3.x prior to 3.0.9, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.16 allows remote malicious users to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantia...
Mozilla Firefox 3.0Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1
5
CVSSv2

CVE-2009-1304

The JavaScript engine in Mozilla Firefox 3.x prior to 3.0.9, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.16 allows remote malicious users to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropert...
Mozilla Firefox 3.0Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1
5
CVSSv2

CVE-2009-1305

The JavaScript engine in Mozilla Firefox prior to 3.0.9, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.16 allows remote malicious users to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and proper...
Mozilla Firefox 3.0Mozilla Firefox 3.0.1Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.0.1
9.3
CVSSv2

CVE-2008-2785

Mozilla Firefox prior to 2.0.0.16 and 3.x prior to 3.0.1, Thunderbird prior to 2.0.0.16, and SeaMonkey prior to 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote malicious u...
Mozilla FirefoxMozilla Firefox 2.0Mozilla Firefox 2.0.0.1Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.4Mozilla Firefox 2.0.0.5Mozilla Firefox 2.0.0.6Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.10
4.3
CVSSv2

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird prior to 2.0.0.24 and SeaMonkey prior to 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service (heap memory cor...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2011-2364

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.18 and Thunderbird prior to 3.1.11 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a ...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2011-2365

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.18 and Thunderbird prior to 3.1.11 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a ...
Mozilla ThunderbirdMozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Thunderbird 0.7Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Thunderbird 0.8
10
CVSSv2

CVE-2011-2992

The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x prior to 2.3, Thunderbird prior to 6, and possibly other products allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrar...
Mozilla Firefox 4.0Mozilla Firefox 4.0.1Mozilla Firefox 5.0Mozilla Seamonkey 2.0Mozilla Seamonkey 2.0.1Mozilla Seamonkey 2.0.2Mozilla Seamonkey 2.0.3Mozilla Seamonkey 2.0.4Mozilla Seamonkey 2.0.5Mozilla Seamonkey 2.0.6Mozilla Seamonkey 2.0.7Mozilla Seamonkey 2.0.8
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
XML external entityremote code executionCVE-2024-44136CVE-2025-21321CVE-2024-41454CVE-2024-55503insecure direct object referenceCVE-2025-20088CVE-2024-44243
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook