CVE-2008-4070 Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary cod...
HighCVSS 10.0
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla seamonkey | <= 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.0.99 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla Thunderbird | <= 2.0.0.16 | No fix listed |
| mozilla Thunderbird | = 0.1 | No fix listed |
| mozilla Thunderbird | = 0.2 | No fix listed |
| mozilla Thunderbird | = 0.3 | No fix listed |
| mozilla Thunderbird | = 0.4 | No fix listed |
| mozilla Thunderbird | = 0.5 | No fix listed |
| mozilla Thunderbird | = 0.6 | No fix listed |
| mozilla Thunderbird | = 0.7 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | = 0.7.1 | No fix listed |
| mozilla Thunderbird | = 0.7.2 | No fix listed |
| mozilla Thunderbird | = 0.7.3 | No fix listed |
| mozilla Thunderbird | = 0.8 | No fix listed |
| mozilla Thunderbird | = 0.9 | No fix listed |
| mozilla Thunderbird | = 1.0 | No fix listed |
| mozilla Thunderbird | = 1.0.1 | No fix listed |
| mozilla Thunderbird | = 1.0.2 | No fix listed |
| mozilla Thunderbird | = 1.0.3 | No fix listed |
| mozilla Thunderbird | = 1.0.4 | No fix listed |
| mozilla Thunderbird | = 1.0.5 | No fix listed |
| mozilla Thunderbird | = 1.0.5-beta | No fix listed |
| mozilla Thunderbird | = 1.0.6 | No fix listed |
| mozilla Thunderbird | = 1.0.7 | No fix listed |
| mozilla Thunderbird | = 1.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5 | No fix listed |
| mozilla Thunderbird | = 1.5-beta2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.1 | No fix listed |
| mozilla Thunderbird | = 1.5.0.2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.3 | No fix listed |
| mozilla Thunderbird | = 1.5.0.4 | No fix listed |
| mozilla Thunderbird | = 1.5.0.6 | No fix listed |
| mozilla Thunderbird | = 1.5.0.7 | No fix listed |
| mozilla Thunderbird | = 1.5.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5.0.9 | No fix listed |
| mozilla Thunderbird | = 1.5.0.10 | No fix listed |
| mozilla Thunderbird | = 1.5.0.11 | No fix listed |
| mozilla Thunderbird | = 1.5.1 | No fix listed |
| mozilla Thunderbird | = 1.5.2 | No fix listed |
| mozilla Thunderbird | = 1.7.1 | No fix listed |
| mozilla Thunderbird | = 1.7.3 | No fix listed |
| mozilla Thunderbird | = 2.0.0.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.1 | No fix listed |
| mozilla Thunderbird | = 2.0.0.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.3 | No fix listed |
| mozilla Thunderbird | = 2.0.0.4 | No fix listed |
| mozilla Thunderbird | = 2.0.0.5 | No fix listed |
| mozilla Thunderbird | = 2.0.0.6 | No fix listed |
| mozilla Thunderbird | = 2.0.0.7 | No fix listed |
| mozilla Thunderbird | = 2.0.0.9 | No fix listed |
| mozilla Thunderbird | = 2.0.0.11 | No fix listed |
| mozilla Thunderbird | = 2.0.0.12 | No fix listed |
| mozilla Thunderbird | = 2.0.0.13 | No fix listed |
| mozilla Thunderbird | = 2.0.0.14 | No fix listed |
| mozilla Thunderbird | = 2.0.0.15 | No fix listed |
References
- SUSE-SA:2008:050 vendor-advisory
- 32010 third-party-advisory
- 32025 third-party-advisory
- 32044 third-party-advisory
- 32082 third-party-advisory
- 32092 third-party-advisory
- 32196 third-party-advisory
- 33433 third-party-advisory
- 33434 third-party-advisory
- 34501 third-party-advisory
- SSA:2008-269-02 vendor-advisory
- SSA:2008-270-01 vendor-advisory
- 256408 vendor-advisory
- DSA-1696 vendor-advisory
- DSA-1697 vendor-advisory
- MDVSA-2008:206 vendor-advisory
- www.mozilla.org patch
- RHSA-2008:0908 vendor-advisory
- 31411 patch vdb-entry
- 1020948 vdb-entry
- USN-647-1 vendor-advisory
- ADV-2009-0977 vdb-entry
- bugzilla.mozilla.org exploit
- mozilla-newsgroupmessage-bo(45426) vdb-entry
- oval:org.mitre.oval:def:10933 signature vdb-entry