CVE-2010-1990

CVE-2010-1990 affects Mozilla Firefox 3.6.x, 3.5.x, 3.0.19 and earlier, and SeaMonkey. The issue arises when an HTML document contains many IFRAME elements with a src of mailto:, causing the mail application to be launched repeatedly and leading to a denial of service via excessive application la...

CVE-2012-1943

CVE-2012-1943 involves an untrusted search path vulnerability in Updater.exe of the Mozilla Updater Service on Windows, affecting Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9. The issue allows local privilege escalation through loading a Trojan horse wsock32.dll located in an application dir...

CVE-2009-4629

Mozilla Necko DNS Information Disclosure (CVE-2009-4629) affects Thunderbird 3.0.1, SeaMonkey, and related apps. The issue is DNS prefetching triggered even for APP_TYPE_MAIL/APP_TYPE_EDITOR, enabling an attacker to infer a user’s network location by logging DNS requests (e.g., when reading text/...

CVE-2011-3664

Affected software: Mozilla Firefox, Thunderbird, and SeaMonkey on Mac OS X. Vulnerable behavior: plugins can delete a DOM frame, triggering an incorrect pointer dereference that may crash the application (DoS) and potentially other unspecified impacts. Severity: base CVSS 2.0 score 6.8 (MEDIUM). ...