Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:3.1.9:*:*:*:*:*:*:*

part: a version: 3.1.9 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.957970
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.957971
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.957973
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.957974

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3993 vulnerable 2026-06-08 05:02:15.383391 Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3980 vulnerable 2026-06-08 05:02:15.190160 Details available
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3978 vulnerable 2026-06-08 05:02:15.077833 Details available
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3975 vulnerable 2026-06-08 05:02:15.068864 Details available
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3974 vulnerable 2026-06-08 05:02:14.795870 Details available
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3971 vulnerable 2026-06-08 05:02:14.784243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3970 vulnerable 2026-06-08 05:02:14.776118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3969 vulnerable 2026-06-08 05:02:14.768614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3966 vulnerable 2026-06-08 05:02:14.758185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3964 vulnerable 2026-06-08 05:02:14.747093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3962 vulnerable 2026-06-08 05:02:14.738020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3958 vulnerable 2026-06-08 05:02:14.705473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1971 vulnerable 2026-06-08 05:00:52.118983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1956 vulnerable 2026-06-08 05:00:51.932104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3666 vulnerable 2026-06-08 04:59:27.471500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3664 vulnerable 2026-06-08 04:59:27.462992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3654 vulnerable 2026-06-08 04:59:27.215231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3653 vulnerable 2026-06-08 04:59:27.209398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3652 vulnerable 2026-06-08 04:59:27.192905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3232 vulnerable 2026-06-08 04:58:11.562086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3005 vulnerable 2026-06-08 04:58:10.223108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3001 vulnerable 2026-06-08 04:58:10.215563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3000 vulnerable 2026-06-08 04:58:10.211116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2999 vulnerable 2026-06-08 04:58:10.179961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2997 vulnerable 2026-06-08 04:58:10.174405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2995 vulnerable 2026-06-08 04:58:09.961910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2984 vulnerable 2026-06-08 04:58:09.932115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2983 vulnerable 2026-06-08 04:58:09.927260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2981 vulnerable 2026-06-08 04:58:09.915225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2980 vulnerable 2026-06-08 04:58:09.911377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2605 vulnerable 2026-06-08 04:58:07.729411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2377 vulnerable 2026-06-08 04:58:05.510778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2376 vulnerable 2026-06-08 04:58:05.504900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2375 vulnerable 2026-06-08 04:58:05.500316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2374 vulnerable 2026-06-08 04:58:05.495200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2373 vulnerable 2026-06-08 04:58:05.490061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2372 vulnerable 2026-06-08 04:58:05.464928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2371 vulnerable 2026-06-08 04:58:05.395724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2366 vulnerable 2026-06-08 04:58:05.368371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2365 vulnerable 2026-06-08 04:58:05.334269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2364 vulnerable 2026-06-08 04:58:05.301390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2363 vulnerable 2026-06-08 04:58:05.298851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2362 vulnerable 2026-06-08 04:58:05.292506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0085 vulnerable 2026-06-08 04:56:35.152036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0084 vulnerable 2026-06-08 04:56:35.146339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0083 vulnerable 2026-06-08 04:56:35.121401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0081 vulnerable 2026-06-08 04:56:34.918334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5074 vulnerable 2026-06-08 04:56:32.024082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2437 vulnerable 2026-06-08 04:47:20.108949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2436 vulnerable 2026-06-08 04:47:20.062799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.