Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*

part: a version: 2.0.0.20 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.881116
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.881118
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.881120
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.881121

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3993 vulnerable 2026-06-08 05:02:15.382963 Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3980 vulnerable 2026-06-08 05:02:15.189742 Details available
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3978 vulnerable 2026-06-08 05:02:15.077423 Details available
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3975 vulnerable 2026-06-08 05:02:15.068449 Details available
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3974 vulnerable 2026-06-08 05:02:14.795472 Details available
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3971 vulnerable 2026-06-08 05:02:14.783846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3970 vulnerable 2026-06-08 05:02:14.775711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3969 vulnerable 2026-06-08 05:02:14.768211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3966 vulnerable 2026-06-08 05:02:14.757778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3964 vulnerable 2026-06-08 05:02:14.746686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3962 vulnerable 2026-06-08 05:02:14.737603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3958 vulnerable 2026-06-08 05:02:14.689241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1971 vulnerable 2026-06-08 05:00:52.118590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1956 vulnerable 2026-06-08 05:00:51.917471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3670 vulnerable 2026-06-08 04:59:27.575845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3666 vulnerable 2026-06-08 04:59:27.470958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3664 vulnerable 2026-06-08 04:59:27.462313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3654 vulnerable 2026-06-08 04:59:27.214821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3652 vulnerable 2026-06-08 04:59:27.180184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3650 vulnerable 2026-06-08 04:59:27.138401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3648 vulnerable 2026-06-08 04:59:27.098069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3647 vulnerable 2026-06-08 04:59:27.078394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3232 vulnerable 2026-06-08 04:58:11.561492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3005 vulnerable 2026-06-08 04:58:10.222595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3001 vulnerable 2026-06-08 04:58:10.215043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3000 vulnerable 2026-06-08 04:58:10.210606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2999 vulnerable 2026-06-08 04:58:10.179425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2997 vulnerable 2026-06-08 04:58:10.173815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2995 vulnerable 2026-06-08 04:58:09.961257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2983 vulnerable 2026-06-08 04:58:09.924967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2372 vulnerable 2026-06-08 04:58:05.459475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3778 vulnerable 2026-06-08 04:55:16.956354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1210 vulnerable 2026-06-08 04:54:06.491650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2466 vulnerable 2026-06-08 04:51:28.685831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2465 vulnerable 2026-06-08 04:51:28.683066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2464 vulnerable 2026-06-08 04:51:28.680084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2463 vulnerable 2026-06-08 04:51:28.658520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2462 vulnerable 2026-06-08 04:51:28.642437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2210 vulnerable 2026-06-08 04:51:27.281947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1305 vulnerable 2026-06-08 04:51:14.468483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1304 vulnerable 2026-06-08 04:51:14.466235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1303 vulnerable 2026-06-08 04:51:14.455024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1302 vulnerable 2026-06-08 04:51:14.435740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.