Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:15.0:*:*:*:*:*:*:*

part: a version: 15.0 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.831363
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.831365
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.831366
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.831367

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3993 vulnerable 2026-06-03 14:32:16.769575 Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Published: 2012-10-10T17:00:00.000Z
Updated: 2024-08-06T20:21:04.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.