Unscored DSA-2345-1 3 CVEs

icedove - several

Published Nov 11, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	icedove	3.0.11-1+squeeze6

Vulnerabilities 3

Unscored —

CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeW…

Nov 9, 2011
Unscored —

CVE-2011-3648

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.…

Nov 9, 2011
Unscored —

CVE-2011-3650

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly hand…

Nov 9, 2011