Mozilla

Thunderbird

2081 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2007-5339

  • EPSS 3.43%
  • Veröffentlicht 21.10.2007 19:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:55

Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption or assert errors.

4.3

CVE-2007-5340

  • EPSS 3.43%
  • Veröffentlicht 21.10.2007 19:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:55

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.

9.3

CVE-2007-4841

  • EPSS 2.65%
  • Veröffentlicht 12.09.2007 20:17:00
  • Zuletzt bearbeitet 16.06.2026 22:44:53

Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file ty...

4.3

CVE-2007-3844

Exploit
  • EPSS 5.45%
  • Veröffentlicht 08.08.2007 01:17:00
  • Zuletzt bearbeitet 16.06.2026 22:42:52

Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an a...

9.3

CVE-2007-3845

  • EPSS 5.7%
  • Veröffentlicht 08.08.2007 01:17:00
  • Zuletzt bearbeitet 16.06.2026 22:42:52

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the fi...

4.3

CVE-2007-4038

  • EPSS 1.11%
  • Veröffentlicht 27.07.2007 22:30:00
  • Zuletzt bearbeitet 16.06.2026 22:43:17

Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands ...

9.3

CVE-2007-3734

  • EPSS 2.22%
  • Veröffentlicht 18.07.2007 17:30:00
  • Zuletzt bearbeitet 16.06.2026 22:42:37

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.

9.3

CVE-2007-3735

  • EPSS 2.22%
  • Veröffentlicht 18.07.2007 17:30:00
  • Zuletzt bearbeitet 16.06.2026 22:42:37

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.

9.3

CVE-2007-2867

  • EPSS 3.41%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 16.06.2026 22:40:35

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of servic...

9.3

CVE-2007-2868

  • EPSS 4.87%
  • Veröffentlicht 01.06.2007 00:30:00
  • Zuletzt bearbeitet 16.06.2026 22:40:35

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of se...