CVE-2004-0908

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0908

mozilla firefox

mozilla

thunderbird

untrusted javascript

clipboard vulnerability

information security

6.2 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

69.0%

JSON

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.

CPENameOperatorVersion
mozilla:mozillamozillaeq1.4.2
mozilla:mozillamozillaeq0.9.5
mozilla:thunderbirdmozilla thunderbirdeq0.6
mozilla:thunderbirdmozilla thunderbirdeq0.7.2
mozilla:mozillamozillaeq0.9.35
mozilla:thunderbirdmozilla thunderbirdeq0.3
mozilla:mozillamozillaeq0.9.3
mozilla:mozillamozillaeq1.0.1
mozilla:mozillamozillaeq1.7
mozilla:thunderbirdmozilla thunderbirdeq0.2

CPE	Name	Operator	Version
mozilla:mozilla	mozilla	eq	1.4.2
mozilla:mozilla	mozilla	eq	0.9.5
mozilla:thunderbird	mozilla thunderbird	eq	0.6
mozilla:thunderbird	mozilla thunderbird	eq	0.7.2
mozilla:mozilla	mozilla	eq	0.9.35
mozilla:thunderbird	mozilla thunderbird	eq	0.3
mozilla:mozilla	mozilla	eq	0.9.3
mozilla:mozilla	mozilla	eq	1.0.1
mozilla:mozilla	mozilla	eq	1.7
mozilla:thunderbird	mozilla thunderbird	eq	0.2