Thunderbird Esr vulnerabilities | LiveThreat CVE Feed

Product

Thunderbird Esr

by Mozilla · last CVE Jun 11, 2018

On CISA KEVExploited in the wild

228

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities228 In the news0 Timeline

Severity mix

Critical 6High 6Medium 6Low 0

Severity

All severities228 Critical6 High6 Medium6 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Thunderbird Esr to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2012-3993	–	43%	Oct 10	The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +2 more
CVE-2012-3992	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history… Affected: before 10.0.8
CVE-2012-3991	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI… Affected: before 10.0.8
CVE-2012-3990	–	5%	Oct 10	Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x… Affected: before 10.0.8
CVE-2012-3988	–	5%	Oct 10	Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13… Affected: before 10.0.8
CVE-2012-3986	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls… Affected: before 10.0.8
CVE-2012-3982	–	5%	Oct 10	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before… Affected: before 10.0.8
CVE-2012-3980	–	2%	Aug 29	The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3978	–	2%	Aug 29	The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3974	–	0%	Aug 29	Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3972	–	4%	Aug 29	The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10.0 before 10.0.7
CVE-2012-3970	–	5%	Aug 29	Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3969	–	5%	Aug 29	Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3968	–	6%	Aug 29	Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10.0 before 10.0.7
CVE-2012-3967	–	4%	Aug 29	The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on… Affected: 10.0 before 10.0.7
CVE-2012-3966	–	5%	Aug 29	Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3964	–	5%	Aug 29	Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3963	–	6%	Aug 29	Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR… Affected: 10.0 before 10.0.7
CVE-2012-3962	–	5%	Aug 29	Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3961	–	7%	Aug 29	Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10.0 before 10.0.7
CVE-2012-3960	–	5%	Aug 29	Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0 before 10.0.7
CVE-2012-3959	–	5%	Aug 29	Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird… Affected: 10.0 before 10.0.7
CVE-2012-3958	–	5%	Aug 29	Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5; +1 more
CVE-2012-3957	–	8%	Aug 29	Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR… Affected: 10.0 before 10.0.7
CVE-2012-3956	–	5%	Aug 29	Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0 before 10.0.7
CVE-2012-1976	–	6%	Aug 29	Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0 before 10.0.7
CVE-2012-1975	–	6%	Aug 29	Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: 10.0 before 10.0.7
CVE-2012-1974	–	6%	Aug 29	Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird… Affected: 10.0 before 10.0.7
CVE-2012-1973	–	6%	Aug 29	Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0 before 10.0.7
CVE-2012-1972	–	6%	Aug 29	Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10.0 before 10.0.7
CVE-2012-1970	–	6%	Aug 29	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10.0 before 10.0.7
CVE-2012-1967	–	4%	Jul 18	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1964	–	1%	Jul 18	The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1963	–	2%	Jul 18	The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1962	–	6%	Jul 18	Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1961	–	2%	Jul 18	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1959	–	2%	Jul 18	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1958	–	5%	Jul 18	Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1957	–	2%	Jul 18	An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1955	–	2%	Jul 18	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1954	–	4%	Jul 18	Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1953	–	4%	Jul 18	The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1952	–	4%	Jul 18	The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1951	–	6%	Jul 18	Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-1948	–	5%	Jul 18	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.0.5
CVE-2012-3105	–	4%	Jun 5	The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1947	–	5%	Jun 5	Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1946	–	4%	Jun 5	Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1945	–	0%	Jun 5	Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1944	–	2%	Jun 5	The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4