Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-0304

Опубликовано: 29 фев. 2008
Источник: nvd
CVSS2: 7.5
EPSS Средний

Описание

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
Версия до 1.1.7 (включая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 2.0.0.9 (включая)

EPSS

Процентиль: 97%
0.33518
Средний

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 17 лет назад

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

redhat
больше 17 лет назад

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

debian
больше 17 лет назад

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and ...

github
больше 3 лет назад

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

EPSS

Процентиль: 97%
0.33518
Средний

7.5 High

CVSS2

Дефекты

CWE-119