Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:3.1.11:*:*:*:*:*:*:*

part: a version: 3.1.11 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.923220
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.923222
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.923223
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.923224

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3993 vulnerable 2026-06-08 05:02:15.383427 Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3980 vulnerable 2026-06-08 05:02:15.190194 Details available
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3978 vulnerable 2026-06-08 05:02:15.077867 Details available
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3975 vulnerable 2026-06-08 05:02:15.068898 Details available
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3974 vulnerable 2026-06-08 05:02:14.795901 Details available
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3971 vulnerable 2026-06-08 05:02:14.784274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3970 vulnerable 2026-06-08 05:02:14.776155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3969 vulnerable 2026-06-08 05:02:14.768646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3966 vulnerable 2026-06-08 05:02:14.758218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3964 vulnerable 2026-06-08 05:02:14.747125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3962 vulnerable 2026-06-08 05:02:14.738052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3958 vulnerable 2026-06-08 05:02:14.706861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1971 vulnerable 2026-06-08 05:00:52.119015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1956 vulnerable 2026-06-08 05:00:51.933175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3670 vulnerable 2026-06-08 04:59:27.576239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3666 vulnerable 2026-06-08 04:59:27.471533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3664 vulnerable 2026-06-08 04:59:27.463026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3654 vulnerable 2026-06-08 04:59:27.215264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3653 vulnerable 2026-06-08 04:59:27.209429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3652 vulnerable 2026-06-08 04:59:27.192972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3650 vulnerable 2026-06-08 04:59:27.138763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3648 vulnerable 2026-06-08 04:59:27.098445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3647 vulnerable 2026-06-08 04:59:27.092844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3232 vulnerable 2026-06-08 04:58:11.562121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3005 vulnerable 2026-06-08 04:58:10.223139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3001 vulnerable 2026-06-08 04:58:10.215594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3000 vulnerable 2026-06-08 04:58:10.211148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2999 vulnerable 2026-06-08 04:58:10.179994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2997 vulnerable 2026-06-08 04:58:10.174438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2995 vulnerable 2026-06-08 04:58:09.961942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2984 vulnerable 2026-06-08 04:58:09.932148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2983 vulnerable 2026-06-08 04:58:09.927292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2982 vulnerable 2026-06-08 04:58:09.919041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2981 vulnerable 2026-06-08 04:58:09.915257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2980 vulnerable 2026-06-08 04:58:09.911411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2378 vulnerable 2026-06-08 04:58:05.515245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2372 vulnerable 2026-06-08 04:58:05.467623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0084 vulnerable 2026-06-08 04:56:35.146373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5074 vulnerable 2026-06-08 04:56:32.025079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2437 vulnerable 2026-06-08 04:47:20.108982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2436 vulnerable 2026-06-08 04:47:20.063973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.