Mozilla Thunderbird 3.1.14
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:thunderbird:3.1.14:*:*:*:*:*:*:*
part: a version: 3.1.14 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Thunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/thunderbird |
purl2cpe | 2026-06-01 10:17:53.923248 |
pkg:mozilla/comm-central |
purl2cpe | 2026-06-01 10:17:53.923250 |
pkg:rpm/fedora/thunderbird |
purl2cpe | 2026-06-01 10:17:53.923251 |
pkg:rpm/opensuse/mozillathunderbird |
purl2cpe | 2026-06-01 10:17:53.923253 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3993 |
vulnerable | 2026-06-08 05:02:15.383477 |
Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3980 |
vulnerable | 2026-06-08 05:02:15.190243 |
Details available
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.189Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3978 |
vulnerable | 2026-06-08 05:02:15.077915 |
Details available
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.063Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3975 |
vulnerable | 2026-06-08 05:02:15.068976 |
Details available
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3974 |
vulnerable | 2026-06-08 05:02:14.795975 |
Details available
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.121Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3971 |
vulnerable | 2026-06-08 05:02:14.784320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3970 |
vulnerable | 2026-06-08 05:02:14.776207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3969 |
vulnerable | 2026-06-08 05:02:14.768722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3966 |
vulnerable | 2026-06-08 05:02:14.758267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3964 |
vulnerable | 2026-06-08 05:02:14.747204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3962 |
vulnerable | 2026-06-08 05:02:14.738427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3958 |
vulnerable | 2026-06-08 05:02:14.708653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1971 |
vulnerable | 2026-06-08 05:00:52.119061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1956 |
vulnerable | 2026-06-08 05:00:51.934672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3666 |
vulnerable | 2026-06-08 04:59:27.471584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3664 |
vulnerable | 2026-06-08 04:59:27.463075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3654 |
vulnerable | 2026-06-08 04:59:27.215313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3653 |
vulnerable | 2026-06-08 04:59:27.209479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3652 |
vulnerable | 2026-06-08 04:59:27.195227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5074 |
vulnerable | 2026-06-08 04:56:32.026759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2437 |
vulnerable | 2026-06-08 04:47:20.109034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2436 |
vulnerable | 2026-06-08 04:47:20.066182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.