NetSight
IP …
critical10.0

CVE-2008-4070

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application…

Impact

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."

Affected products

VendorProductAffected versions
MozillaSeamonkey
through 1.1.11
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 2.0.0.16
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-119

References