Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:*

part: a version: 24.1.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.908575
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.908576
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.908578
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.908579

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1567 vulnerable 2026-06-08 05:05:25.451541 Details available
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1562 vulnerable 2026-06-08 05:05:25.446817 Details available
Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2014-09-03T10:00:00.000Z
Updated: 2024-08-06T09:42:36.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1560 vulnerable 2026-06-08 05:05:25.440137 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1559 vulnerable 2026-06-08 05:05:25.439596 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1558 vulnerable 2026-06-08 05:05:25.439018 Details available
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1559.
Published: 2014-07-23T10:00:00.000Z
Updated: 2024-08-06T09:42:36.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1557 vulnerable 2026-06-08 05:05:25.431889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1556 vulnerable 2026-06-08 05:05:25.430698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1555 vulnerable 2026-06-08 05:05:25.426853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1552 vulnerable 2026-06-08 05:05:25.416241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1551 vulnerable 2026-06-08 05:05:25.415630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1550 vulnerable 2026-06-08 05:05:25.414725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1549 vulnerable 2026-06-08 05:05:25.414034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1548 vulnerable 2026-06-08 05:05:25.409891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1547 vulnerable 2026-06-08 05:05:25.409087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1544 vulnerable 2026-06-08 05:05:25.365680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1541 vulnerable 2026-06-08 05:05:25.351745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1539 vulnerable 2026-06-08 05:05:25.348600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1538 vulnerable 2026-06-08 05:05:25.345744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.