Mozilla

Thunderbird

1584 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2014-1568

  • EPSS 40.04%
  • Veröffentlicht 25.09.2014 17:55:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31...

10

CVE-2014-1553

  • EPSS 0.44%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or...

10

CVE-2014-1562

  • EPSS 1.01%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corr...

10

CVE-2014-1563

  • EPSS 1.15%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of servi...

4.3

CVE-2014-1564

  • EPSS 14.29%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script ...

5

CVE-2014-1565

  • EPSS 0.8%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers t...

9.3

CVE-2014-1567

  • EPSS 1.81%
  • Veröffentlicht 03.09.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via tex...

10

CVE-2014-1551

  • EPSS 5.41%
  • Veröffentlicht 23.07.2014 11:12:43
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML cont...

5.8

CVE-2014-1552

  • EPSS 0.2%
  • Veröffentlicht 23.07.2014 11:12:43
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction ...

9.3

CVE-2014-1555

  • EPSS 2.95%
  • Veröffentlicht 23.07.2014 11:12:43
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateCha...