Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable801371.PRM
HistoryFeb 07, 2012 - 12:00 a.m.

Mozilla Thunderbird 3.1.x Multiple Vulnerabilities

2012-02-0700:00:00
Tenable
www.tenable.com
20

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.898

Percentile

98.8%

JSON

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Versions of Thunderbird 3.1.x earlier than 3.1.18 are potentially affected by the following security issues :

  • A use-after-free error exists related to removed nsDOMAttribute child nodes. (CVE-2011-3659)

  • The IPv6 literal syntax in web addresses is not being properly enforced. (CVE-2011-3670)

  • Various memory safety issues exist. (CVE-2012-0442)

  • Memory corruption errors exist related to the decoding of Ogg Vorbis files and processing of malformed XSLT stylesheets. (CVE-2012-0444, CVE-2012-0449)

Binary data 801371.prm

Related

redhat 4
nessus 59
suse 3
openvas 70
centos 5
oraclelinux 4
ubuntu 6
debian 3
osv 3
securityvulns 8
freebsd 1
cve 3
cvelist 3
veracode 3
ubuntucve 4
saint 4
prion 3
metasploit 1
zdt 1
exploitdb 1
zdi 2
packetstorm 1
nvd 5
mozilla 1
checkpoint_advisories 1
redhat
redhat
(RHSA-2012:0079) Critical: firefox security update
2012-01-31 00:00:00
(RHSA-2012:0080) Critical: thunderbird security update
2012-01-31 00:00:00
(RHSA-2012:0085) Critical: thunderbird security update
2012-02-01 00:00:00
nessus
nessus
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7949)
2012-02-08 00:00:00
Mozilla Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities
2012-02-07 00:00:00
CentOS 4 / 5 / 6 : firefox (CESA-2012:0079)
2012-02-02 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-02-09 19:10:22
Security update for Mozilla XULrunner (important)
2012-02-09 19:07:25
MozillaFirefox: Version 10 (important)
2012-02-09 19:10:49
openvas
openvas
Ubuntu: Security Advisory (USN-1353-1)
2012-02-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0221-1)
2021-06-09 00:00:00
CentOS Update for firefox CESA-2012:0079 centos6
2012-07-30 00:00:00
centos
centos
firefox, xulrunner security update
2012-02-01 03:34:27
thunderbird security update
2012-02-01 11:56:07
seamonkey security update
2012-02-01 12:34:44
oraclelinux
oraclelinux
firefox security update
2012-01-31 00:00:00
thunderbird security update
2012-01-31 00:00:00
thunderbird security update
2012-02-01 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-02-08 00:00:00
Xulrunnner vulnerabilities
2012-02-08 00:00:00
Mozvoikko update
2012-02-03 00:00:00
debian
debian
[SECURITY] [DSA 2402-1] iceape security update
2012-02-02 19:53:30
[SECURITY] [DSA 2400-1] iceweasel security update
2012-02-02 19:52:15
[SECURITY] [DSA 2406-1] icedove security update
2012-02-09 12:07:23
osv
osv
iceweasel - several
2012-02-02 00:00:00
iceape - several
2012-02-02 00:00:00
icedove - several
2012-02-09 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-02-03 00:00:00
Mozilla Foundation Security Advisory 2012-02
2012-02-03 00:00:00
Mozilla Foundation Security Advisory 2012-04
2012-02-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-01-31 00:00:00
cve
cve
CVE-2011-3670
2012-02-01 16:55:00
CVE-2012-0449
2012-02-01 16:55:01
CVE-2011-3659
2012-02-01 16:55:00
cvelist
cvelist
CVE-2012-0449
2012-02-01 16:00:00
CVE-2011-3670
2012-02-01 16:00:00
CVE-2011-3659
2012-02-01 16:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:07:21
Arbitrary Code Execution
2020-04-10 01:07:17
Arbitrary Code Execution
2020-04-10 01:07:19
ubuntucve
ubuntucve
CVE-2012-0449
2012-02-01 00:00:00
CVE-2011-3659
2012-02-01 00:00:00
CVE-2011-3670
2012-02-01 00:00:00
saint
saint
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
prion
prion
Information disclosure
2012-02-01 16:55:00
Design/Logic Flaw
2012-02-01 16:55:00
Memory corruption
2012-02-01 16:55:00
metasploit
metasploit
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-13 09:31:46
zdt
zdt
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-13 00:00:00
exploitdb
exploitdb
Mozilla Firefox 8/9 - &#039;AttributeChildRemoved()&#039; Use-After-Free (Metasploit)
2012-05-13 00:00:00
zdi
zdi
Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability
2012-06-28 00:00:00
Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability
2012-04-09 00:00:00
packetstorm
packetstorm
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-14 00:00:00
nvd
nvd
CVE-2011-3659
2012-02-01 16:55:00
CVE-2012-0449
2012-02-01 16:55:01
CVE-2011-3670
2012-02-01 16:55:00
mozilla
mozilla
Crash with malformed embedded XSLT stylesheets — Mozilla
2012-01-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444)
2012-05-14 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.898

Percentile

98.8%

JSON
Related for 801371.PRM
redhat4nessus59suse3openvas70centos5oraclelinux4ubuntu6debian3osv3securityvulns8freebsd1cve3cvelist3veracode3ubuntucve4saint4prion3metasploit1zdt1exploitdb1zdi2packetstorm1nvd5mozilla1checkpoint_advisories1