Mozilla

Thunderbird

1542 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2006-1732

  • EPSS 2.21%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS)...

6.8

CVE-2006-1733

  • EPSS 24.27%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute...

6.8

CVE-2006-1734

Exploit
  • EPSS 32.74%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal func...

9.3

CVE-2006-1735

Exploit
  • EPSS 39.01%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javas...

2.6

CVE-2006-1736

  • EPSS 1.62%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image li...

9.3

CVE-2006-1739

  • EPSS 33.12%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary ...

2.6

CVE-2006-1740

  • EPSS 2.19%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing ...

5

CVE-2006-1742

  • EPSS 13.99%
  • Published 14.04.2006 10:02:00
  • Last modified 03.04.2025 01:03:51

The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remot...

2.6

CVE-2006-1045

Exploit
  • EPSS 10.4%
  • Published 07.03.2006 11:02:00
  • Last modified 03.04.2025 01:03:51

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive info...

9.3

CVE-2006-0884

Exploit
  • EPSS 36%
  • Published 24.02.2006 22:02:00
  • Last modified 03.04.2025 01:03:51

The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript U...