Thunderbird Esr vulnerabilities

2 known vulnerabilities in Thunderbird Esr from Mozilla. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Mozilla Firefox and Thunderbird Denial-of-Service Exploited

  CVE-2013-1690Jun 26, 2013MozillaEPSS 69%

  Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial

• 6.5 Medium severity

  Mozilla Firefox Information Disclosure Exploited

  CVE-2013-1675May 16, 2013MozillaEPSS 6.7%

  Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, whic