Versions of Mozilla Thunderbird 3.0.x prior to 3.0.11 are affected by the following vulnerabilities :

 - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)
 - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)
 - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

Versions of Mozilla Thunderbird 3.1.x prior to 3.1.7 are affected by the following vulnerabilities :

 - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)
 - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)
 - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

Versions of SeaMonkey 2.0.x earlier than 2.0.11 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)

  - A privilege escalation vulnerability exists with 'window.open' and the '<isindex>' element. (MFSA 2010-76)

  - Arbitrary code execution is possible when using HTML tags inside a XUL tree. (MFSA 2010-77)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

  - A Java security bypass vulnerability when LiveConnect is loaded via a 'data:' URL meta refresh. (MFSA 2010-79)

  - A use-after-free error exists with nsDOMAttribute MutationObserver. (MFSA 2010-80)

  - An integer overflow exists in NewIdArray. (MFSA 2010-81)

  - It is possible to circumvent the fix for CVE-2010-0179. (MFSA 2010-82)

  - It is possible to spoof SSL in the location bar using the network error page. (MFSA 2010-83)

  - A cross-site scripting hazard exists in multiple character encodings. (MFSA 2010-84)

Versions of Thunderbird 3.0.x earlier than 3.0.11 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

Versions of Firefox 3.6.x earlier than 3.6.13 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called witha  very long string a buffer voerflow could be triggered. (MFSA 2010-75)

  - A privilege escalation vulnerability exists with 'window.open' and the '&lt;isindex&gt;' element. (MFSA 2010-76)

  - Arbitrary code execution is possible when using HTML tags inside a XUL tree. (MFSA 2010-77)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

  - A Java security bypass vulnerability when LiveConnect is loaded via a 'data:' URL meta refresh. (MFSA 2010-79)

  - A use-after free error exists with nsDOMAttribute MutationObserver. (MFSA 2010-80)

  - An integer overflow exists in NewIdArray. (MFSA 2010-81)

  - It is possible to circumvent the fix for CVE-2010-0179. (MFSA 2010-82)

  - It is possible to spoof SSL in the location bar using the network error page. (MFSA 2010-83)

  - A cross-site scripting hazard exists in multiple character encodings. (MFSA 2010-84)

Versions of Firefox 3.5.x earlier than 3.5.16 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)

  - A privilege escalation vulnerability exists with 'window.open' and the '&lt;isindex&gt;' element. (MFSA 2010-76)

  - Arbitrary code execution is possible when using HTML tags inside a XUL tree. (MFSA 2010-77)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

  - A Java security bypass vulnerability when LiveConnect is loaded via a 'data:' URL meta refresh. (MFSA 2010-79)

  - A use-after-free error exists with nsDOMAttribute MutationObserver. (MFSA 2010-80)

  - An integer overflow exists n NewIdArray. (MFSA 2010-81)

  - It is possible to circumvent the fix for CVE-2010-0179. (MFSA 2010-82)

  - It is possible to spoof SSL in the location bar using the network error page. (MFSA 2010-83)

  - A cross-site scripting hazard exists in multiple character encodings. (MFSA 2010-84)

Versions of Thunderbird 3.1.x earlier than 3.1.7 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

Versions of SeaMonkey 2.0.x earlier than 2.0.11 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues could lead to arbitrary code execution. (MFSA 2010-74)

  - On the Windows platform, when 'document.write()' is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)

  - A privilege escalation vulnerability exists with 'window.open' and the '&lt;isindex&gt;' element. (MFSA 2010-76)

  - Arbitrary code execution is possible when using HTML tags inside a XUL tree. (MFSA 2010-77)

  - Downloadable fonts could expose vulnerabilities in the underlying OS font code. (MFSA 2010-78)

  - A Java security bypass vulnerability when LiveConnect is loaded via a 'data:' URL meta refresh. (MFSA 2010-79)

  - A use-after-free error exists with nsDOMAttribute MutationObserver. (MFSA 2010-80)

  - An integer overflow exists in NewIdArray. (MFSA 2010-81)

  - It is possible to circumvent the fix for CVE-2010-0179. (MFSA 2010-82)

  - It is possible to spoof SSL in the location bar using the network error page. (MFSA 2010-83)

  - A cross-site scripting hazard exists in multiple character encodings. (MFSA 2010-84)

ID	Name	Product	Family	Published	Updated	Severity
5729	Mozilla Thunderbird 3.0.x < 3.0.11 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	12/10/2010	3/6/2019	medium
5730	Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	12/10/2010	3/6/2019	medium
5731	SeaMonkey 2.0.x < 2.0.11 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	12/10/2010	3/6/2019	high
801367	Mozilla Thunderbird 3.0.x < 3.0.11 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	12/10/2010		high
801273	Mozilla Firefox 3.6.x < 3.6.13 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/9/2010		high
801351	Mozilla Firefox < 3.5.16 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/10/2010		high
801315	Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	12/10/2010		high
801283	Mozilla SeaMonkey 2.0.x < 2.0.11 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/10/2010		high

Detections

Analytics

Plugins Search

medium

medium

high

high

high

high

high

high