VulnerabilityModified
CVE-2004-0908
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
MEDIUM 4.0EPSS 2.45%
Does this matter?
Lower severity and a low EPSS score (2.45%). Track it; it rarely justifies an emergency change on its own.
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N
- EPSS
- 2.45% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/mozilla · mozilla/thunderbird
- Source
- cve@mitre.org
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=257523Exploit, Patch
- http://marc.info/?l=bugtraq&m=109698896104418&w=2
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- http://secunia.com/advisories/12526
- http://security.gentoo.org/glsa/glsa-200409-26.xml
- http://www.kb.cert.org/vuls/id/460528US Government Resource
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.htmlPatch
- http://www.securityfocus.com/bid/11179Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17376
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745
- http://bugzilla.mozilla.org/show_bug.cgi?id=257523Exploit, Patch
- http://marc.info/?l=bugtraq&m=109698896104418&w=2
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- http://secunia.com/advisories/12526
- http://security.gentoo.org/glsa/glsa-200409-26.xml
- http://www.kb.cert.org/vuls/id/460528US Government Resource
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.htmlPatch
- http://www.securityfocus.com/bid/11179Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17376
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.