Thunderbird
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*
part: a version: 2.0_.9 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Thunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/thunderbird |
purl2cpe | 2026-06-01 10:17:53.902461 |
pkg:mozilla/comm-central |
purl2cpe | 2026-06-01 10:17:53.902463 |
pkg:rpm/fedora/thunderbird |
purl2cpe | 2026-06-01 10:17:53.902464 |
pkg:rpm/opensuse/mozillathunderbird |
purl2cpe | 2026-06-01 10:17:53.902466 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3232 |
vulnerable | 2026-06-08 04:58:11.561613 |
Details available
YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
Published: 2011-09-29T00:00:00.000Z
Updated: 2024-08-06T23:29:56.165Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3005 |
vulnerable | 2026-06-08 04:58:10.222703 |
Details available
Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
Published: 2011-09-29T00:00:00.000Z
Updated: 2024-08-06T23:22:27.157Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3001 |
vulnerable | 2026-06-08 04:58:10.215157 |
Details available
Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
Published: 2011-09-29T00:00:00.000Z
Updated: 2024-08-06T23:22:27.276Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3000 |
vulnerable | 2026-06-08 04:58:10.210713 |
Details available
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
Published: 2011-09-29T00:00:00.000Z
Updated: 2024-08-06T23:22:26.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2999 |
vulnerable | 2026-06-08 04:58:10.179532 |
Details available
Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, a different vulnerability than CVE-2010-0170.
Published: 2011-09-29T00:00:00.000Z
Updated: 2024-08-06T23:22:26.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2997 |
vulnerable | 2026-06-08 04:58:10.173993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2995 |
vulnerable | 2026-06-08 04:58:09.961371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2372 |
vulnerable | 2026-06-08 04:58:05.462236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2535 |
vulnerable | 2026-06-08 04:51:29.086829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2210 |
vulnerable | 2026-06-08 04:51:27.282058 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1841 |
vulnerable | 2026-06-08 04:51:25.236187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1838 |
vulnerable | 2026-06-08 04:51:25.211615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1836 |
vulnerable | 2026-06-08 04:51:25.134966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1833 |
vulnerable | 2026-06-08 04:51:25.122718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1832 |
vulnerable | 2026-06-08 04:51:25.117357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1392 |
vulnerable | 2026-06-08 04:51:22.759704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1303 |
vulnerable | 2026-06-08 04:51:14.461976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4060 |
vulnerable | 2026-06-08 04:50:37.637954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3835 |
vulnerable | 2026-06-08 04:50:36.752394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2808 |
vulnerable | 2026-06-08 04:50:32.233628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2806 |
vulnerable | 2026-06-08 04:50:32.210813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.