Mozilla Thunderbird Extended Support Release (ESR) 17.0.4
Approved changes feed: RSS · Atom
cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*
part: a version: 17.0.4 update: *
| Vendor | Mozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1) |
|---|---|
| Product | Thunderbird Esr (8cda75e7-5b98-5e3e-b343-10e3be29a684) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/thunderbird |
purl2cpe | 2026-06-01 10:17:53.581751 |
pkg:mozilla/comm-central |
purl2cpe | 2026-06-01 10:17:53.581752 |
pkg:rpm/fedora/thunderbird |
purl2cpe | 2026-06-01 10:17:53.581754 |
pkg:rpm/opensuse/mozillathunderbird |
purl2cpe | 2026-06-01 10:17:53.581755 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-2018 |
vulnerable | 2026-06-03 14:33:49.364180 |
Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T09:58:16.231Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6674 |
vulnerable | 2026-06-03 14:33:27.278013 |
Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T17:46:22.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5604 |
vulnerable | 2026-06-03 14:33:22.102354 |
Details available
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5602 |
vulnerable | 2026-06-03 14:33:22.097771 |
Details available
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5601 |
vulnerable | 2026-06-03 14:33:22.094068 |
Details available
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5600 |
vulnerable | 2026-06-03 14:33:22.089499 |
Details available
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.438Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5599 |
vulnerable | 2026-06-03 14:33:22.085318 |
Details available
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5597 |
vulnerable | 2026-06-03 14:33:22.079096 |
Details available
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5595 |
vulnerable | 2026-06-03 14:33:22.071771 |
Details available
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.440Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5590 |
vulnerable | 2026-06-03 14:33:22.053363 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.675Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1737 |
vulnerable | 2026-06-03 14:32:51.329675 |
Details available
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.377Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1736 |
vulnerable | 2026-06-03 14:32:51.328383 |
Details available
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.191Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1735 |
vulnerable | 2026-06-03 14:32:51.322995 |
Details available
Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.178Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1732 |
vulnerable | 2026-06-03 14:32:51.147821 |
Details available
Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.443Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1730 |
vulnerable | 2026-06-03 14:32:51.144100 |
Details available
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.358Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1726 |
vulnerable | 2026-06-03 14:32:51.134748 |
Details available
Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 does not ensure exclusive access to a MAR file, which allows local users to gain privileges by creating a Trojan horse file after MAR signature verification but before MAR use.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:31.665Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1725 |
vulnerable | 2026-06-03 14:32:51.131656 |
Details available
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by leveraging incorrect scope handling.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.609Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1722 |
vulnerable | 2026-06-03 14:32:51.122364 |
Details available
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.395Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1718 |
vulnerable | 2026-06-03 14:32:51.049282 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-09-18T10:00:00.000Z
Updated: 2024-08-06T15:13:32.284Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1717 |
vulnerable | 2026-06-03 14:32:51.045190 |
Details available
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.688Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1714 |
vulnerable | 2026-06-03 14:32:51.043522 |
Details available
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.319Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1713 |
vulnerable | 2026-06-03 14:32:51.039410 |
Details available
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1712 |
vulnerable | 2026-06-03 14:32:50.926414 |
Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1710 |
vulnerable | 2026-06-03 14:32:50.921193 |
Details available
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.636Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1709 |
vulnerable | 2026-06-03 14:32:50.914155 |
Details available
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1707 |
vulnerable | 2026-06-03 14:32:50.908628 |
Details available
Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 allows local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1706 |
vulnerable | 2026-06-03 14:32:50.907794 |
Details available
Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 allows local users to gain privileges via a long pathname on the command line.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1701 |
vulnerable | 2026-06-03 14:32:50.893336 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.594Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1697 |
vulnerable | 2026-06-03 14:32:50.853285 |
Details available
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:32.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1694 |
vulnerable | 2026-06-03 14:32:50.851438 |
Details available
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:31.704Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1693 |
vulnerable | 2026-06-03 14:32:50.850368 |
Details available
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:31.729Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1692 |
vulnerable | 2026-06-03 14:32:50.849354 |
Details available
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:31.648Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1687 |
vulnerable | 2026-06-03 14:32:50.828323 |
Details available
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:32.816Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1686 |
vulnerable | 2026-06-03 14:32:50.827315 |
Details available
Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:32.674Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1685 |
vulnerable | 2026-06-03 14:32:50.826267 |
Details available
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:32.393Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1684 |
vulnerable | 2026-06-03 14:32:50.825277 |
Details available
Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:31.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1682 |
vulnerable | 2026-06-03 14:32:50.822443 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-06-26T01:00:00.000Z
Updated: 2024-08-06T15:13:32.796Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1681 |
vulnerable | 2026-06-03 14:32:50.804856 |
Details available
Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:31.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1680 |
vulnerable | 2026-06-03 14:32:50.803868 |
Details available
Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1679 |
vulnerable | 2026-06-03 14:32:50.802881 |
Details available
Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1678 |
vulnerable | 2026-06-03 14:32:50.801752 |
Details available
The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.753Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1677 |
vulnerable | 2026-06-03 14:32:50.800761 |
Details available
The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1676 |
vulnerable | 2026-06-03 14:32:50.799743 |
Details available
The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1674 |
vulnerable | 2026-06-03 14:32:50.780030 |
Details available
Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:31.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1672 |
vulnerable | 2026-06-03 14:32:50.778745 |
Details available
The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:32.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1670 |
vulnerable | 2026-06-03 14:32:50.777336 |
Details available
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T15:13:31.673Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0801 |
vulnerable | 2026-06-03 14:32:45.746968 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-08-06T14:41:47.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0799 |
vulnerable | 2026-06-03 14:32:45.668621 |
Details available
Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.
Published: 2013-04-03T10:00:00.000Z
Updated: 2024-08-06T14:41:47.344Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0797 |
vulnerable | 2026-06-03 14:32:45.665148 |
Details available
Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory.
Published: 2013-04-03T10:00:00.000Z
Updated: 2024-08-06T14:41:47.110Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0795 |
vulnerable | 2026-06-03 14:32:45.660852 |
Details available
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Published: 2013-04-03T10:00:00.000Z
Updated: 2024-08-06T14:41:47.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0793 |
vulnerable | 2026-06-03 14:32:45.653894 |
Details available
Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing.
Published: 2013-04-03T10:00:00.000Z
Updated: 2024-08-06T14:41:47.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0788 |
vulnerable | 2026-06-03 14:32:45.582334 |
Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2013-04-03T10:00:00.000Z
Updated: 2024-08-06T14:41:47.068Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.