CVE-2004-0908

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.

Affected products

Mozilla: 0.8, 0.9.2, 0.9.2.1, 0.9.3, 0.9.4, 0.9.4.1 (+38)
Mozilla Thunderbird: 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+3)

References

http://bugzilla.mozilla.org/show_bug.cgi?id=257523
http://marc.info/?l=bugtraq&m=109698896104418&w=2
http://marc.info/?l=bugtraq&m=109900315219363&w=2
http://secunia.com/advisories/12526
http://security.gentoo.org/glsa/glsa-200409-26.xml
http://www.kb.cert.org/vuls/id/460528
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
http://www.securityfocus.com/bid/11179
https://exchange.xforce.ibmcloud.com/vulnerabilities/17376
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745
http://bugzilla.mozilla.org/show_bug.cgi?id=257523

Get alerted when CVE-2004-0908 or the next vulnerability affects your stack