Thunderbird Esr vulnerabilities | LiveThreat CVE Feed

Product

Thunderbird Esr

by Mozilla · last CVE Jun 11, 2018

On CISA KEVExploited in the wild

228

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities228 In the news0 Timeline

Severity mix

Critical 6High 6Medium 6Low 0

Severity

All severities228 Critical6 High6 Medium6 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Thunderbird Esr to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2012-1941	–	5%	Jun 5	Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1940	–	4%	Jun 5	Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1939	–	3%	Jun 5	jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-1937	–	5%	Jun 5	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-0441	–	3%	Jun 5	The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-0479	–	2%	Apr 25	Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0478	–	3%	Apr 25	The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0477	–	2%	Apr 25	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0474	–	2%	Apr 25	Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0473	–	2%	Apr 25	The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0472	–	4%	Apr 25	The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-0471	–	2%	Apr 25	Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2012-0470	–	10%	Apr 25	Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-0469	–	7%	Apr 25	Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4,… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4
CVE-2012-0467	–	6%	Apr 25	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3
CVE-2011-3062	–	2%	Mar 30	Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Affected: before 10.0.4
CVE-2012-0464	–	4%	Mar 14	Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0463	–	4%	Mar 14	The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0462	–	4%	Mar 14	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0461	–	3%	Mar 14	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0460	–	2%	Mar 14	Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0459	–	4%	Mar 14	The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0458	–	3%	Mar 14	Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0457	–	7%	Mar 14	Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0456	–	3%	Mar 14	The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0455	–	2%	Mar 14	Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0454	–	3%	Mar 14	Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey… Affected: 10.0; 10.0.1; 10.0.2
CVE-2012-0451	–	2%	Mar 14	CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey… Affected: 10.0; 10.0.1; 10.0.2