Mozilla

Thunderbird

1542 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-3183

  • EPSS 8.27%
  • Veröffentlicht 21.10.2010 19:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls tha...

4.3

CVE-2010-3170

  • EPSS 1.16%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-th...

7.5

CVE-2010-3173

  • EPSS 2.35%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which m...

9.3

CVE-2010-3174

  • EPSS 3.09%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly ex...

9.3

CVE-2010-3175

  • EPSS 2.91%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arb...

9.3

CVE-2010-3176

  • EPSS 5.14%
  • Veröffentlicht 21.10.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service...

9.3

CVE-2010-2760

  • EPSS 4.16%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code v...

6.8

CVE-2010-2762

  • EPSS 1.74%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attacker...

4.3

CVE-2010-2763

  • EPSS 0.53%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers ...

4.3

CVE-2010-2764

  • EPSS 1.18%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers...