Low DSA-3092-1 6 CVEs

icedove - security update

Published Dec 7, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	icedove	31.3.0-1~deb7u1

Vulnerabilities 6

Low 3.4

CVE-2014-3566 Public exploit EPSS 100%

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

openssl openssl openjdk-7 wolfssl Debian Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-1587

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3…

thunderbird firefox Ubuntu

Dec 11, 2014
Unscored —

CVE-2014-1590

The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird befo…

thunderbird firefox Ubuntu

Dec 11, 2014
Unscored —

CVE-2014-1592

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ES…

thunderbird firefox Ubuntu

Dec 11, 2014
Unscored —

CVE-2014-1593

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 3…

thunderbird firefox Ubuntu

Dec 11, 2014
Unscored —

CVE-2014-1594

Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might all…

thunderbird firefox Ubuntu

Dec 11, 2014