Mozilla

Thunderbird

1542 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-5430

  • EPSS 0.56%
  • Published 13.12.2008 08:40:08
  • Last modified 09.04.2025 00:30:58

Mozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which might allow remote attackers to cause a denial of s...

5

CVE-2008-5012

  • EPSS 5.97%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin...

10

CVE-2008-5014

  • EPSS 25.21%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifyin...

5

CVE-2008-5016

  • EPSS 21.26%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other conse...

10

CVE-2008-5017

  • EPSS 17.42%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (c...

10

CVE-2008-5018

  • EPSS 20.19%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient...

9.3

CVE-2008-5021

  • EPSS 25.26%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying pr...

7.5

CVE-2008-5022

  • EPSS 13.45%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrar...

7.5

CVE-2008-5024

Exploit
  • EPSS 7.22%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection at...

10

CVE-2008-5052

  • EPSS 23.01%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that ...