Mozilla Thunderbird Extended Support Release (ESR) 10.0.6
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:thunderbird_esr:10.0.6:*:*:*:*:*:*:*
part: a version: 10.0.6 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Thunderbird Esr (8cda75e7-5b98-5e3e-b343-10e3be29a684) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/thunderbird |
purl2cpe | 2026-06-01 10:17:53.581697 |
pkg:mozilla/comm-central |
purl2cpe | 2026-06-01 10:17:53.581698 |
pkg:rpm/fedora/thunderbird |
purl2cpe | 2026-06-01 10:17:53.581699 |
pkg:rpm/opensuse/mozillathunderbird |
purl2cpe | 2026-06-01 10:17:53.581701 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3993 |
vulnerable | 2026-06-08 05:02:15.363906 |
Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3980 |
vulnerable | 2026-06-08 05:02:15.190750 |
Details available
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.189Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3978 |
vulnerable | 2026-06-08 05:02:15.073924 |
Details available
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.063Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3974 |
vulnerable | 2026-06-08 05:02:15.062901 |
Details available
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.121Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3970 |
vulnerable | 2026-06-08 05:02:14.777967 |
Details available
Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:21:04.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3969 |
vulnerable | 2026-06-08 05:02:14.764921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3966 |
vulnerable | 2026-06-08 05:02:14.760674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3964 |
vulnerable | 2026-06-08 05:02:14.743390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3962 |
vulnerable | 2026-06-08 05:02:14.734192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3958 |
vulnerable | 2026-06-08 05:02:14.726166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.