Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:*

part: a version: 24.2 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.911203
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.911204
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.911206
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.911207

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1567 vulnerable 2026-06-08 05:05:25.451557 Details available
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1562 vulnerable 2026-06-08 05:05:25.446835 Details available
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1560 vulnerable 2026-06-08 05:05:25.440162 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1559 vulnerable 2026-06-08 05:05:25.439613 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1558 vulnerable 2026-06-08 05:05:25.439035 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1559.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1557 vulnerable 2026-06-08 05:05:25.431905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1556 vulnerable 2026-06-08 05:05:25.430715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1555 vulnerable 2026-06-08 05:05:25.426870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1552 vulnerable 2026-06-08 05:05:25.416256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1551 vulnerable 2026-06-08 05:05:25.415646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1550 vulnerable 2026-06-08 05:05:25.414741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1549 vulnerable 2026-06-08 05:05:25.414050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1548 vulnerable 2026-06-08 05:05:25.409907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1547 vulnerable 2026-06-08 05:05:25.409104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1544 vulnerable 2026-06-08 05:05:25.365698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1541 vulnerable 2026-06-08 05:05:25.351761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1539 vulnerable 2026-06-08 05:05:25.348616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1538 vulnerable 2026-06-08 05:05:25.346251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.