Mozilla

Thunderbird Esr

243 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-4195

  • EPSS 0.96%
  • Veröffentlicht 29.10.2012 18:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and prin...

6.4

CVE-2012-4196

Exploit
  • EPSS 0.96%
  • Veröffentlicht 29.10.2012 18:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a pro...

6.8

CVE-2012-4193

Exploit
  • EPSS 1.41%
  • Veröffentlicht 12.10.2012 10:44:20
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, w...

4.3

CVE-2012-3992

  • EPSS 1.14%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XS...

9.3

CVE-2012-3993

  • EPSS 80.84%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallT...

4.3

CVE-2012-3994

  • EPSS 0.93%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Obj...

9.3

CVE-2012-3995

  • EPSS 2.02%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a den...

9.3

CVE-2012-4179

  • EPSS 6.07%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote att...

9.3

CVE-2012-4180

  • EPSS 9.49%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote a...

9.3

CVE-2012-4181

  • EPSS 3.5%
  • Veröffentlicht 10.10.2012 17:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote atta...