icedove vulnerabilities (Debian)
413 vulnerabilities.
icedoveDebianA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 HighicedoveDebianAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighicedoveDebianExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighicedoveDebianUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalicedoveDebianUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalicedoveDebianMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighicedoveDebianEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumicedoveDebianMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalicedoveDebianA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighicedoveDebianAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 MediumicedoveDebianA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighicedoveDebianAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalicedoveDebianA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighicedoveDebianA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumicedoveDebianMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 CriticalicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 HighicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 HighicedoveDebianicedove - regression updateNo scoreicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 HighicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...8.8 HighicedoveDebianUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...8.8 HighicedoveDebianUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...8.8 HighicedoveDebianThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...8.8 HighicedoveDebianThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...8.8 HighicedoveDebianUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...8.8 HighicedoveDebianUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...9.8 CriticalicedoveDebianUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...8.8 HighicedoveDebianInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...8.8 HighicedoveDebianMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...4.3 MediumicedoveDebianThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...8.8 HighicedoveDebianHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...8.8 HighicedoveDebianThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...8.8 HighicedoveDebianThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...8.8 HighicedoveDebianThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighicedoveDebianHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...8.8 HighicedoveDebianThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighicedoveDebianThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...8.8 HighicedoveDebianHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...8.8 HighicedoveDebianThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighicedoveDebianThe graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used...8.8 HighicedoveDebianCachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...8.8 HighicedoveDebianThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighicedoveDebianThe graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox...8.8 HighicedoveDebianThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 HighicedoveDebianThe Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in...8.8 HighicedoveDebianThe TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in...8.1 HighicedoveDebianThe SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in...6.5 MediumicedoveDebianBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...8.8 HighicedoveDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...9.8 Critical- Show moreLoading…