Mozilla

Thunderbird

2081 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-3835

  • EPSS 2.14%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:56:37

The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vect...

7.5

CVE-2008-4058

  • EPSS 5.08%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:04

The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vec...

7.5

CVE-2008-4060

  • EPSS 4.8%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:04

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vector...

10

CVE-2008-4061

  • EPSS 4.99%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:05

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) ...

10

CVE-2008-4062

  • EPSS 4.99%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:05

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or po...

4.3

CVE-2008-4065

Exploit
  • EPSS 4.11%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:05

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) charact...

4.3

CVE-2008-4067

Exploit
  • EPSS 4.44%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:06

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) ...

7.8

CVE-2008-4068

  • EPSS 4.17%
  • Veröffentlicht 24.09.2008 20:37:04
  • Zuletzt bearbeitet 16.06.2026 22:57:06

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive inf...

10

CVE-2008-2798

  • EPSS 13.95%
  • Veröffentlicht 07.07.2008 23:41:00
  • Zuletzt bearbeitet 16.06.2026 22:54:28

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unk...

10

CVE-2008-2799

  • EPSS 5.57%
  • Veröffentlicht 07.07.2008 23:41:00
  • Zuletzt bearbeitet 16.06.2026 22:54:28

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unk...