Mozilla

Thunderbird

1786 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2006-5462

  • EPSS 2.63%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:14

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature...

5

CVE-2006-5464

  • EPSS 4.29%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:15

Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

7.5

CVE-2006-5747

  • EPSS 5.53%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:46

Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.

5

CVE-2006-5748

  • EPSS 5.52%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:47

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi...

2.6

CVE-2006-4570

  • EPSS 2.25%
  • Veröffentlicht 15.09.2006 19:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:22

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forward...

10

CVE-2006-4571

  • EPSS 5.44%
  • Veröffentlicht 15.09.2006 19:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:22

Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified ve...

4

CVE-2006-4340

  • EPSS 2.15%
  • Veröffentlicht 15.09.2006 18:07:00
  • Zuletzt bearbeitet 16.06.2026 22:28:54

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature...

9.3

CVE-2006-4565

  • EPSS 5.71%
  • Veröffentlicht 15.09.2006 18:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:20

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression ...

5

CVE-2006-4566

  • EPSS 3.77%
  • Veröffentlicht 15.09.2006 18:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:21

Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character ...

2.6

CVE-2006-4567

Exploit
  • EPSS 1.79%
  • Veröffentlicht 15.09.2006 18:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:21

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting ...