Skip to content
OpenAdvisories
Unscored DSA-2273-3 10 CVEs

icedove - multiple issues

Published Jul 6, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 icedove 3.0.11-1+squeeze3

Vulnerabilities 10

  • Unscored —

    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists i…

  • Unscored —

    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird befor…

  • Unscored —

    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cooki…

  • Unscored —

    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists i…

  • Unscored —

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2371 Public exploit EPSS 76%

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird be…

  • Unscored —

    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and Sea…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and …

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.…

  • Unscored —

    CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService…