Mozilla

Thunderbird

2081 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2006-6501

  • EPSS 2.92%
  • Veröffentlicht 20.12.2006 01:28:00
  • Zuletzt bearbeitet 16.06.2026 22:33:15

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.

7.1

CVE-2006-6502

  • EPSS 2.35%
  • Veröffentlicht 20.12.2006 01:28:00
  • Zuletzt bearbeitet 16.06.2026 22:33:15

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown ...

6.8

CVE-2006-6503

  • EPSS 4.1%
  • Veröffentlicht 20.12.2006 01:28:00
  • Zuletzt bearbeitet 16.06.2026 22:33:15

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: ...

6.8

CVE-2006-6505

  • EPSS 4.24%
  • Veröffentlicht 20.12.2006 01:28:00
  • Zuletzt bearbeitet 16.06.2026 22:33:16

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME no...

7.5

CVE-2006-5463

  • EPSS 2.68%
  • Veröffentlicht 08.11.2006 22:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:15

Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary JavaScript bytecode via unspecified vectors involving modification of a Script object whi...

6.4

CVE-2006-5462

  • EPSS 2.7%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:14

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature...

5

CVE-2006-5464

  • EPSS 4.4%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:15

Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

7.5

CVE-2006-5747

  • EPSS 5.68%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:46

Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.

5

CVE-2006-5748

  • EPSS 5.67%
  • Veröffentlicht 08.11.2006 21:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:47

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi...

2.6

CVE-2006-4570

  • EPSS 2.39%
  • Veröffentlicht 15.09.2006 19:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:22

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forward...