40728 matches found
SUSE-SU-2025:01660-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.1. Security fixes: - MFSA 2025-34 bsc1243216 CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird. CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential...
CVE-2019-9789
Mozilla developers and community members reported memory safety bugs present in Firefox 65. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 66...
CVE-2019-17025
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 72...
CVE-2011-2604
The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service system crash via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK...
CVE-2013-1689
Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service crash, related to event handling with frames...
CVE-2011-2668
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...
CVE-2011-2669
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
CVE-2013-5594
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding...
CVE-2011-3671
Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element...
CVE-2011-2603
The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service desktop hang via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK...
CVE-2011-2600
The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service system crash via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to...
[SECURITY] Fedora 42 Update: mozilla-ublock-origin-1.64.0-1.fc42
An efficient blocker: easy on memory and CPU footprint, and yet can load and enforce thousands more filters than other popular blockers out there. Flexible, it's more than an "ad blocker": it can also read and create filters from hosts files...
Mozilla Thunderbird < 138.0.2
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 138.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-41 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing arr...
Mozilla Thunderbird < 138.0.2
The version of Thunderbird installed on the remote Windows host is prior to 138.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-41 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index...
Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-140-02)
The version of mozilla-thunderbird installed on the remote host is prior to 128.10.2esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-140-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...
Mozilla Thunderbird < 128.10.2
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-40 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing...
CVE-2009-0821
Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service application crash via nested calls to the window.print function, as demonstrated by a window.printwindow.print in the onclick attribute of an INPUT element...
CVE-2007-5967
A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval...
CVE-2006-6971
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in 1 dotted-hex, 2 dotted-octal, 3 single decimal integer, 4 single hex integer, or 5 single octal integer format, which is not captured by...