Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:31.3:*:*:*:*:*:*:*

part: a version: 31.3 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.948127
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.948129
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.948131
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.948132

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0836 vulnerable 2026-06-03 14:34:37.516107 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0833 vulnerable 2026-06-03 14:34:37.502417 Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0831 vulnerable 2026-06-03 14:34:37.173029 Details available
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0827 vulnerable 2026-06-03 14:34:37.154389 Details available
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0822 vulnerable 2026-06-03 14:34:37.123922 Details available
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.050Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.