GCVE - cpe:2.3:a:mozilla:seamonkey:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:seamonkey:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Mozilla (`be1b0d4e-21a7-5a25-9982-bbda6ef43ec1`)
Product	Seamonkey (`9b67c4f8-e83e-55c8-8c3d-4a52e7d74102`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/seamonkey-project/seamonkey-2.53-comm`	purl2cpe	2026-06-01 10:17:53.359350
`pkg:mozilla/seamonkey`	purl2cpe	2026-06-01 10:17:53.359352
`pkg:rpm/fedora/seamonkey`	purl2cpe	2026-06-01 10:17:53.359353

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0464`	vulnerable	2026-06-03 14:31:37.174257	Details available Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:30.994Z Open on db.gcve.eu Reference links http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757 http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 https://bugzilla.mozilla.org/show_bug.cgi?id=735104 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0463`	vulnerable	2026-06-03 14:31:37.171111	Details available The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.019Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html http://secunia.com/advisories/48629	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0461`	vulnerable	2026-06-03 14:31:37.164113	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.034Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0458`	vulnerable	2026-06-03 14:31:37.154144	Details available Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.026Z Open on db.gcve.eu Reference links http://www.mozilla.org/security/announce/2012/mfsa2012-16.html http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://secunia.com/advisories/48624	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0457`	vulnerable	2026-06-03 14:31:37.151042	Details available Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.006Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0456`	vulnerable	2026-06-03 14:31:37.147925	Details available The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.011Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.