Mozilla

Seamonkey

704 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-0167

  • EPSS 22.87%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash)...

5

CVE-2010-0169

  • EPSS 0.42%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings i...

4.3

CVE-2010-0171

  • EPSS 0.52%
  • Veröffentlicht 25.03.2010 21:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) at...

7.1

CVE-2009-3385

  • EPSS 1.39%
  • Veröffentlicht 23.03.2010 00:53:22
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e...

4.3

CVE-2010-0161

  • EPSS 1.5%
  • Veröffentlicht 23.03.2010 00:53:22
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial o...

4.3

CVE-2010-0163

  • EPSS 5.44%
  • Veröffentlicht 23.03.2010 00:53:22
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly ...

10

CVE-2010-0159

  • EPSS 2.15%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute ...

10

CVE-2010-0160

  • EPSS 5.18%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap me...

4.3

CVE-2010-0162

  • EPSS 0.82%
  • Veröffentlicht 22.02.2010 13:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving S...

10

CVE-2009-1571

  • EPSS 7.86%
  • Veröffentlicht 22.02.2010 13:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that at...