Mozilla

Thunderbird Esr

239 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2013-0793

  • EPSS 1.5%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote atta...

10

CVE-2013-0795

  • EPSS 2.01%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for clo...

10

CVE-2013-0796

Exploit
  • EPSS 4.53%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote at...

6.9

CVE-2013-0797

  • EPSS 0.17%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges ...

7.2

CVE-2013-0799

  • EPSS 0.2%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted argument...

6.8

CVE-2013-0800

  • EPSS 2.8%
  • Veröffentlicht 03.04.2013 11:56:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, Se...

5.9

CVE-2013-2566

  • EPSS 90.32%
  • Veröffentlicht 15.03.2013 21:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that u...

9.3

CVE-2013-0787

  • EPSS 6.17%
  • Veröffentlicht 11.03.2013 10:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey...

9.3

CVE-2013-0773

  • EPSS 1.52%
  • Veröffentlicht 19.02.2013 23:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modi...

4.3

CVE-2013-0774

Exploit
  • EPSS 0.55%
  • Veröffentlicht 19.02.2013 23:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspeci...