TE
Product
Thunderbird Esr
On CISA KEVExploited in the wild
228
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 6Low 0
Watch
Add Thunderbird Esr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-1697 | – | Jun 26 | The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1694 | – | Jun 26 | The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1693 | – | Jun 26 | The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1692 | – | Jun 26 | Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1687 | – | Jun 26 | The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1686 | – | Jun 26 | Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1685 | – | Jun 26 | Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1684 | – | Jun 26 | Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1682 | – | Jun 26 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5; +1 more |
| CVE-2013-1681 | – | May 16 | Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1680 | – | May 16 | Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1679 | – | May 16 | Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1678 | – | May 16 | The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1677 | – | May 16 | The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1676 | – | May 16 | The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1674 | – | May 16 | Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-1672 | – | May 16 | The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows… Affected: through 17.0.5; 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-1670 | – | May 16 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-0801 | – | May 16 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4; 17.0.5 |
| CVE-2013-0800 | – | Apr 3 | Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before… Affected: 17.0 before 17.0.5 |
| CVE-2013-0799 | – | Apr 3 | Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-0797 | – | Apr 3 | Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-0796 | – | Apr 3 | The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on… Affected: 17.0 before 17.0.5 |
| CVE-2013-0795 | – | Apr 3 | The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-0793 | – | Apr 3 | Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-0791 | – | Apr 3 | The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5,… Affected: 17.0 before 17.0.5 |
| CVE-2013-0788 | – | Apr 3 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3; 17.0.4 |
| CVE-2013-0787 | – | Mar 11 | Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4,… Affected: 17.0; 17.0.1; 17.0.2; 17.0.3 |
| CVE-2013-0784 | – | Feb 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a… Affected: before 17.0.3 |
| CVE-2013-0783 | – | Feb 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before… Affected: before 17.0.3 |
| CVE-2013-0782 | – | Feb 19 | Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: before 17.0.3 |
| CVE-2013-0781 | – | Feb 19 | Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote… Affected: before 17.0.3 |
| CVE-2013-0780 | – | Feb 19 | Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: before 17.0.3 |
| CVE-2013-0779 | – | Feb 19 | The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code… Affected: before 17.0.3 |
| CVE-2013-0778 | – | Feb 19 | The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or… Affected: before 17.0.3 |
| CVE-2013-0777 | – | Feb 19 | Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote… Affected: before 17.0.3 |
| CVE-2013-0776 | – | Feb 19 | Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle… Affected: before 17.0.3 |
| CVE-2013-0775 | – | Feb 19 | Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: before 17.0.3 |
| CVE-2013-0774 | – | Feb 19 | Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript… Affected: before 17.0.3 |
| CVE-2013-0773 | – | Feb 19 | The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: before 17.0.3 |
| CVE-2013-0771 | – | Jan 13 | Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0770 | – | Jan 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a… Affected: before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0769 | – | Jan 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0768 | – | Jan 13 | Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before… Affected: before 17.0.2 |
| CVE-2013-0767 | – | Jan 13 | The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0766 | – | Jan 13 | Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0764 | – | Jan 13 | The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and… Affected: before 17.0.3 |
| CVE-2013-0763 | – | Jan 13 | Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0762 | – | Jan 13 | Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |
| CVE-2013-0761 | – | Jan 13 | Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10.0 before 10.0.12; 17.0 before 17.0.2 |