icedove vulnerabilities (Debian)
413 vulnerabilities.
-
icedoveDebian icedove - regression update No score -
icedoveDebian A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during... 9.8 Critical -
icedoveDebian A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files... 8.1 High -
icedoveDebian When a page's content security policy (CSP) header contains a "sandbox" directive, other... 7.5 High -
icedoveDebian A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an... 9.8 Critical -
icedoveDebian A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during... 9.8 Critical -
icedoveDebian A use-after-free vulnerability can occur in WebSockets when the object holding the connection is... 9.8 Critical -
icedoveDebian A buffer overflow will occur when viewing a certificate in the certificate manager if the... 9.8 Critical -
icedoveDebian On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will... 5.3 Medium -
icedoveDebian Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads... 7.5 High -
icedoveDebian A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG... 9.8 Critical -
icedoveDebian A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)... 9.8 Critical -
icedoveDebian A use-after-free vulnerability can occur when reading an image observer during frame... 9.8 Critical -
icedoveDebian Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of... 9.8 Critical -
icedoveDebian An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,... 9.1 Critical -
icedoveDebian A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,... 9.8 Critical -
icedoveDebian Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:... 8.8 High -
icedoveDebian Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:... 8.1 High -
icedoveDebian Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite... 9.1 Critical -
icedoveDebian Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src... 8.8 High -
icedoveDebian Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. 8.8 High -
icedoveDebian Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function. 8.1 High -
icedoveDebian Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other... 5.3 Medium -
icedoveDebian An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio... 9.1 Critical -
icedoveDebian A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while... 9.8 Critical -
icedoveDebian A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP... 9.8 Critical -
icedoveDebian An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL... 7.5 High -
icedoveDebian A use-after-free vulnerability during specific user interactions with the input method editor ... 8.8 High -
icedoveDebian A use-after-free vulnerability with content viewer listeners that results in a potentially... 9.8 Critical -
icedoveDebian A use-after-free vulnerability during video control operations when a "<track>" element holds a... 9.8 Critical -
icedoveDebian A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell.... 9.8 Critical -
icedoveDebian A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating... 9.8 Critical -
icedoveDebian Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed... 9.8 Critical -
icedoveDebian Memory corruption resulting in a potentially exploitable crash during garbage collection of... 9.8 Critical -
icedoveDebian Video files loaded video captions cross-origin without checking for the presence of CORS headers... 5.3 Medium -
icedoveDebian Using SVG filters that don't use the fixed point math implementation on a target iframe, a... 6.5 Medium -
icedoveDebian Certain response codes in FTP connections can result in the use of uninitialized values for ports... 5.3 Medium -
icedoveDebian A use-after-free error can occur when manipulating ranges in selections with one node inside a... 9.8 Critical -
icedoveDebian A use-after-free can occur when events are fired for a "FontFace" object after the object has... 9.8 Critical -
icedoveDebian A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to... 9.8 Critical -
icedoveDebian JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP... 9.8 Critical -
icedoveDebian Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of... 9.8 Critical -
icedoveDebian A use-after-free vulnerability in the Media Decoder when working with media files when some... 9.8 Critical -
icedoveDebian The JSON viewer in the Developer Tools uses insecure methods to create a communication channel... 9.8 Critical -
icedoveDebian URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger... 5.3 Medium -
icedoveDebian A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This... 9.8 Critical -
icedoveDebian Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks... 7.5 High -
icedoveDebian Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <... 9.8 Critical -
icedoveDebian JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential... 9.8 Critical -
icedoveDebian Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed... 9.8 Critical - Show olderLoading…