Thunderbird Esr (Mozilla) - vulnerabilities (CVEs)

228 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2018-06-11. Vendor: Mozilla.

CVEs of Thunderbird Esr

• CVE-2018-5185 - CVSS 6.5 (medium), 2018-06-11: Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
• CVE-2018-5184 - CVSS 7.5 (high), 2018-06-11: Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
• CVE-2018-5183 - CVSS 9.8 (critical), 2018-06-11: Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes…
• CVE-2018-5178 - CVSS 8.1 (high), 2018-06-11: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the…
• CVE-2018-5155 - CVSS 9.8 (critical), 2018-06-11: A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This…
• CVE-2018-5162 - CVSS 7.5 (high), 2018-06-11: Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird…
• CVE-2018-5174 - CVSS 7.5 (high), 2018-06-11: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any…
• CVE-2018-5154 - CVSS 9.8 (critical), 2018-06-11: A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash.…
• CVE-2018-5161 - CVSS 4.3 (medium), 2018-06-11: Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird <…
• CVE-2018-5170 - CVSS 4.3 (medium), 2018-06-11: It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is…
• CVE-2018-5159 - CVSS 9.8 (critical), 2018-06-11: An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds…
• CVE-2018-5168 - CVSS 5.3 (medium), 2018-06-11: Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a…
• CVE-2018-5150 - CVSS 9.8 (critical), 2018-06-11: Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume…
• CVE-2017-5398 - CVSS 9.8 (critical), 2018-06-11: Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some…
• CVE-2014-2018 - CVSS 4.3 (medium), 2014-02-17: Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows…
• CVE-2013-6674 - CVSS 4.3 (medium), 2014-02-17: Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows…
• CVE-2013-5600 - CVSS 10 (critical), 2013-10-30: Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and…
• CVE-2013-5603 - CVSS 10 (critical), 2013-10-30: Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,…
• CVE-2013-5590 - CVSS 10 (critical), 2013-10-30: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird…
• CVE-2013-5595 - CVSS 4.3 (medium), 2013-10-30: The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x…
• CVE-2013-5599 - CVSS 10 (critical), 2013-10-30: Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before…
• CVE-2013-5602 - CVSS 10 (critical), 2013-10-30: The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,…
• CVE-2013-5593 - CVSS 4.3 (medium), 2013-10-30: The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not…
• CVE-2013-5597 - CVSS 10 (critical), 2013-10-30: Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before…
• CVE-2013-5601 - CVSS 10 (critical), 2013-10-30: Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x…
• CVE-2013-5604 - CVSS 9.3 (critical), 2013-10-30: The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,…
• CVE-2013-5591 - CVSS 10 (critical), 2013-10-30: Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before…
• CVE-2013-5596 - CVSS 6.8 (medium), 2013-10-30: The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does…
• CVE-2013-1726 - CVSS 6.2 (medium), 2013-09-18: Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey…
• CVE-2013-1735 - CVSS 9.3 (critical), 2013-09-18: Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird…
• CVE-2013-1725 - CVSS 6.8 (medium), 2013-09-18: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not…
• CVE-2013-1732 - CVSS 9.3 (critical), 2013-09-18: Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0,…
• CVE-2013-1737 - CVSS 5 (medium), 2013-09-18: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not…
• CVE-2013-1722 - CVSS 9.3 (critical), 2013-09-18: Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x…
• CVE-2013-1730 - CVSS 6.8 (medium), 2013-09-18: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not…
• CVE-2013-1736 - CVSS 10 (critical), 2013-09-18: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before…
• CVE-2013-1718 - CVSS 10 (critical), 2013-09-18: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0,…
• CVE-2013-1717 - CVSS 5.4 (medium), 2013-08-07: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not…
• CVE-2013-1707 - CVSS 7.2 (high), 2013-08-07: Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR…
• CVE-2013-1712 - CVSS 6.9 (medium), 2013-08-07: Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird…
• CVE-2013-1706 - CVSS 7.2 (high), 2013-08-07: Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8,…
• CVE-2013-1710 - CVSS 10 (critical), 2013-08-07: The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before…
• CVE-2013-1714 - CVSS 4.3 (medium), 2013-08-07: The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8,…
• CVE-2013-1701 - CVSS 10 (critical), 2013-08-07: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,…
• CVE-2013-1709 - CVSS 4.3 (medium), 2013-08-07: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not…
• CVE-2013-1713 - CVSS 4.3 (medium), 2013-08-07: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an…
• CVE-2013-1686 - CVSS 10 (critical), 2013-06-26: Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and…
• CVE-2013-1692 - CVSS 4.3 (medium), 2013-06-26: Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of…
• CVE-2013-1697 - CVSS 9.3 (critical), 2013-06-26: The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…
• CVE-2013-1685 - CVSS 9.3 (critical), 2013-06-26: Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before…
• CVE-2013-1690 - CVSS 8.8 (high), 2013-06-26: Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle…
• CVE-2013-1694 - CVSS 7.5 (high), 2013-06-26: The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…
• CVE-2013-1684 - CVSS 9.3 (critical), 2013-06-26: Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x…
• CVE-2013-1687 - CVSS 9.3 (critical), 2013-06-26: The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird…
• CVE-2013-1693 - CVSS 4.3 (medium), 2013-06-26: The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…
• CVE-2013-1682 - CVSS 10 (critical), 2013-06-26: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and…
• CVE-2013-1681 - CVSS 10 (critical), 2013-05-16: Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird…
• CVE-2013-1670 - CVSS 4.3 (medium), 2013-05-16: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR…
• CVE-2013-1675 - CVSS 6.5 (medium), 2013-05-16: Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data…
• CVE-2013-1678 - CVSS 10 (critical), 2013-05-16: The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x…
• CVE-2013-0801 - CVSS 10 (critical), 2013-05-16: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and…
• CVE-2013-1674 - CVSS 9.3 (critical), 2013-05-16: Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6…
• CVE-2013-1677 - CVSS 10 (critical), 2013-05-16: The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR…
• CVE-2013-1680 - CVSS 10 (critical), 2013-05-16: Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before…
• CVE-2013-1672 - CVSS 6.9 (medium), 2013-05-16: The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…
• CVE-2013-1676 - CVSS 10 (critical), 2013-05-16: The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR…
• CVE-2013-1679 - CVSS 10 (critical), 2013-05-16: Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6,…
• CVE-2013-0799 - CVSS 7.2 (high), 2013-04-03: Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird…
• CVE-2013-0793 - CVSS 4.3 (medium), 2013-04-03: Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not…
• CVE-2013-0797 - CVSS 6.9 (medium), 2013-04-03: Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5,…
• CVE-2013-0791 - CVSS 5 (medium), 2013-04-03: The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5,…
• CVE-2013-0796 - CVSS 10 (critical), 2013-04-03: The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and…
• CVE-2013-0800 - CVSS 6.8 (medium), 2013-04-03: Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0,…
• CVE-2013-0788 - CVSS 10 (critical), 2013-04-03: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5,…
• CVE-2013-0795 - CVSS 10 (critical), 2013-04-03: The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x…
• CVE-2013-2566 - CVSS 5.9 (medium), 2013-03-15: The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct…
• CVE-2013-0787 - CVSS 9.3 (critical), 2013-03-11: Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x…
• CVE-2013-0777 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before…
• CVE-2013-0780 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird…
• CVE-2013-0783 - CVSS 9.3 (critical), 2013-02-19: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,…
• CVE-2013-0773 - CVSS 9.3 (critical), 2013-02-19: The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird…
• CVE-2013-0776 - CVSS 4 (medium), 2013-02-19: Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow…
• CVE-2013-0779 - CVSS 9.3 (critical), 2013-02-19: The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to…
• CVE-2013-0782 - CVSS 9.3 (critical), 2013-02-19: Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird…
• CVE-2013-0775 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3,…
• CVE-2013-0778 - CVSS 9.3 (critical), 2013-02-19: The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to…
• CVE-2013-0781 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16…
• CVE-2013-0784 - CVSS 9.3 (critical), 2013-02-19: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allow remote…
• CVE-2013-0774 - CVSS 4.3 (medium), 2013-02-19: Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not…
• CVE-2013-0759 - CVSS 5 (medium), 2013-01-13: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x…
• CVE-2013-0762 - CVSS 9.3 (critical), 2013-01-13: Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1,…
• CVE-2013-0766 - CVSS 9.3 (critical), 2013-01-13: Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1,…
• CVE-2013-0769 - CVSS 9.3 (critical), 2013-01-13: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird…
• CVE-2013-0758 - CVSS 9.3 (critical), 2013-01-13: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x…
• CVE-2013-0761 - CVSS 9.3 (critical), 2013-01-13: Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1,…
• CVE-2013-0764 - CVSS 9.3 (critical), 2013-01-13: The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x…
• CVE-2013-0768 - CVSS 9.3 (critical), 2013-01-13: Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2,…
• CVE-2013-0771 - CVSS 9.3 (critical), 2013-01-13: Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird…
• CVE-2013-0757 - CVSS 9.3 (critical), 2013-01-13: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x…
• CVE-2013-0760 - CVSS 9.3 (critical), 2013-01-13: Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15…