Mozilla

Thunderbird

1786 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2012-3968

  • EPSS 5.9%
  • Veröffentlicht 29.08.2012 10:56:40
  • Zuletzt bearbeitet 16.06.2026 23:44:09

Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitra...

9.3

CVE-2012-3969

  • EPSS 4.81%
  • Veröffentlicht 29.08.2012 10:56:40
  • Zuletzt bearbeitet 16.06.2026 23:44:09

Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execut...

10

CVE-2012-3970

  • EPSS 5.19%
  • Veröffentlicht 29.08.2012 10:56:40
  • Zuletzt bearbeitet 16.06.2026 23:44:10

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execu...

10

CVE-2012-3971

  • EPSS 5.24%
  • Veröffentlicht 29.08.2012 10:56:40
  • Zuletzt bearbeitet 16.06.2026 23:44:10

Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vecto...

4.3

CVE-2012-1956

  • EPSS 1.89%
  • Veröffentlicht 29.08.2012 10:56:39
  • Zuletzt bearbeitet 16.06.2026 23:40:39

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-si...

10

CVE-2012-1970

  • EPSS 5.57%
  • Veröffentlicht 29.08.2012 10:56:39
  • Zuletzt bearbeitet 16.06.2026 23:40:42

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial...

9.3

CVE-2012-1971

  • EPSS 3.81%
  • Veröffentlicht 29.08.2012 10:56:39
  • Zuletzt bearbeitet 16.06.2026 23:40:42

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly ex...

10

CVE-2012-1972

  • EPSS 5.57%
  • Veröffentlicht 29.08.2012 10:56:39
  • Zuletzt bearbeitet 16.06.2026 23:40:42

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote ...

10

CVE-2012-1973

  • EPSS 5.57%
  • Veröffentlicht 29.08.2012 10:56:39
  • Zuletzt bearbeitet 16.06.2026 23:40:42

Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attac...

4.3

CVE-2012-1961

  • EPSS 2.12%
  • Veröffentlicht 18.07.2012 10:26:49
  • Zuletzt bearbeitet 16.06.2026 23:40:40

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier fo...