Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:*

part: a version: 24.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.908563
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.908565
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.908567
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.908568

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1567 vulnerable 2026-06-08 05:05:25.451524 Details available
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1562 vulnerable 2026-06-08 05:05:25.446798 Details available
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1560 vulnerable 2026-06-08 05:05:25.440121 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1559 vulnerable 2026-06-08 05:05:25.439579 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1558 vulnerable 2026-06-08 05:05:25.439001 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1559.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1557 vulnerable 2026-06-08 05:05:25.431873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1556 vulnerable 2026-06-08 05:05:25.430677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1555 vulnerable 2026-06-08 05:05:25.426837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1552 vulnerable 2026-06-08 05:05:25.416224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1551 vulnerable 2026-06-08 05:05:25.415614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1550 vulnerable 2026-06-08 05:05:25.414709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1549 vulnerable 2026-06-08 05:05:25.414017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1548 vulnerable 2026-06-08 05:05:25.409874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1547 vulnerable 2026-06-08 05:05:25.409071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1544 vulnerable 2026-06-08 05:05:25.365659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1541 vulnerable 2026-06-08 05:05:25.351727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1539 vulnerable 2026-06-08 05:05:25.348583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1538 vulnerable 2026-06-08 05:05:25.345129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.