Mozilla

Thunderbird Esr

239 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2013-0793

  • EPSS 1.5%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote atta...

10

CVE-2013-0795

  • EPSS 2.01%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for clo...

10

CVE-2013-0796

Exploit
  • EPSS 4.53%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote at...

6.9

CVE-2013-0797

  • EPSS 0.17%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges ...

7.2

CVE-2013-0799

  • EPSS 0.2%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted argument...

6.8

CVE-2013-0800

  • EPSS 2.8%
  • Published 03.04.2013 11:56:21
  • Last modified 11.04.2025 00:51:21

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, Se...

5.9

CVE-2013-2566

  • EPSS 90.32%
  • Published 15.03.2013 21:55:01
  • Last modified 11.04.2025 00:51:21

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that u...

9.3

CVE-2013-0787

  • EPSS 6.17%
  • Published 11.03.2013 10:55:00
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey...

9.3

CVE-2013-0773

  • EPSS 1.52%
  • Published 19.02.2013 23:55:01
  • Last modified 11.04.2025 00:51:21

The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modi...

4.3

CVE-2013-0774

Exploit
  • EPSS 0.55%
  • Published 19.02.2013 23:55:01
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspeci...