Mozilla

Thunderbird

1786 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-3166

  • EPSS 5.56%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:22:16

Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute ar...

9.3

CVE-2010-3167

  • EPSS 6.53%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:22:16

The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to e...

9.3

CVE-2010-3168

  • EPSS 4.81%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:22:16

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to c...

9.3

CVE-2010-3169

  • EPSS 3.73%
  • Veröffentlicht 09.09.2010 19:00:02
  • Zuletzt bearbeitet 16.06.2026 23:22:17

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memor...

9.3

CVE-2010-3131

Exploit
  • EPSS 22.11%
  • Veröffentlicht 26.08.2010 18:36:35
  • Zuletzt bearbeitet 16.06.2026 23:22:11

Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbit...

9.3

CVE-2010-2752

  • EPSS 9.78%
  • Veröffentlicht 30.07.2010 20:30:02
  • Zuletzt bearbeitet 16.06.2026 23:21:26

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Casc...

9.3

CVE-2010-2753

Exploit
  • EPSS 6.67%
  • Veröffentlicht 30.07.2010 20:30:02
  • Zuletzt bearbeitet 16.06.2026 23:21:26

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a X...

4.3

CVE-2010-1207

  • EPSS 1.36%
  • Veröffentlicht 30.07.2010 20:30:01
  • Zuletzt bearbeitet 16.06.2026 23:17:51

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node d...

4.3

CVE-2010-1210

  • EPSS 1.34%
  • Veröffentlicht 30.07.2010 20:30:01
  • Zuletzt bearbeitet 16.06.2026 23:17:51

intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to cond...

9.3

CVE-2010-1211

  • EPSS 3.73%
  • Veröffentlicht 30.07.2010 20:30:01
  • Zuletzt bearbeitet 16.06.2026 23:17:51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of se...