Design/Logic Flaw

Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service heap memo...

CVE-2013-5603

The vulnerability CVE-2013-5603 affects Mozilla Firefox before 25.0 (and related ESR/Thunderbird/SeaMonkey releases) via a use-after-free in nsContentUtils::ContentIsHostIncludingDescendantOf, enabling remote code execution or heap memory corruption through HTML document templates. Impact is remo...

PT-2013-5673

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 25.0 Firefox ESR 24.x versions prior to 24.1 Thunderbird versions prior to 24.1 SeaMonkey versions prior to 2.22 Description The issue is related to a use-after-free vulnerability in the...

Mozilla Thunderbird Multiple Vulnerabilities -01 May13 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln01may13win.nasl 6125 2017-05-15 09:03:42Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities -01 May13 Windows Authors: Arun Kallavi Copyright:...

CVE-2013-1681: Undefined Security Weakness

Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service heap...

PT-2013-3316

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 21.0 Firefox ESR 17.x versions prior to 17.0.6 Thunderbird versions prior to 17.0.6 Thunderbird ESR 17.x versions prior to 17.0.6 Description A use-after-free issue in the nsContentUtils::RemoveScriptBlocker...

PT-2013-2616

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 20.0 SeaMonkey versions prior to 2.17 Description The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to cause a denial of service, such as memory...

CVE-2013-0789: Undefined Security Weakness

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjec...

Memory corruption

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 the frame chain and synchronous events, 2 a SetMayHaveFrame assertion and...

CVE-2009-2462

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 the frame chain and synchronous events, 2 a SetMayHaveFrame assertion and...