MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticalMozillaThunderbirdopenSUSEOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...5.3 MediumMozillaThunderbirdopenSUSEIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...7.5 HighMozillaThunderbirdopenSUSEA malicious site could spoof the contents of the print preview window if popup windows are...7.5 HighMozillaThunderbirdopenSUSEIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 HighMozillaThunderbirdopenSUSEAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 MediumMozillaThunderbirdopenSUSEIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 HighMozillaThunderbirdopenSUSEThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 MediumMozillaThunderbirdopenSUSEA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 CriticalMozillaThunderbirdopenSUSEA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 HighMozillaThunderbirdopenSUSEMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticalMozillaThunderbirdopenSUSEVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumMozillaThunderbirdopenSUSEUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumMozillaThunderbirdopenSUSEA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 HighMozillaThunderbirdopenSUSECertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumMozillaThunderbirdopenSUSEA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticalMozillaThunderbirdopenSUSEWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticalMozillaThunderbirdopenSUSEA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticalMozillaThunderbirdopenSUSEJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticalMozillaThunderbirdopenSUSElibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...5.5 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticalMozillaThunderbirdopenSUSEThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticalMozillaThunderbirdopenSUSEURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumMozillaThunderbirdopenSUSEA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticalMozillaThunderbirdopenSUSEHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighMozillaThunderbirdopenSUSEUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticalMozillaThunderbirdopenSUSEJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticalMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticalMozillaThunderbirdopenSUSEA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 HighMozillaThunderbirdopenSUSEAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighMozillaThunderbirdopenSUSEExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighMozillaThunderbirdopenSUSEUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticalMozillaThunderbirdopenSUSEUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticalMozillaThunderbirdopenSUSEMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighMozillaThunderbirdopenSUSEEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumMozillaThunderbirdopenSUSEMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighMozillaThunderbirdopenSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighMozillaThunderbirdopenSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalMozillaThunderbirdopenSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighMozillaThunderbirdopenSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumMozillaThunderbirdopenSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalMozillaThunderbirdopenSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 CriticalMozillaThunderbirdopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumMozillaThunderbirdopenSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighMozillaThunderbirdopenSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighMozillaThunderbirdopenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Medium- Show moreLoading…