Every CVE Search/ Get API key

CVE-2008-0304

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8...

7.5 HighFix available

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Exploit likelihood

6.05%Down 6.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Record
CVE-2008-0304
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Record
CVE-2008-0304
Updated
2026-11-02
EUVDEUVD-2008-0314 No score

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Record
EUVD-2008-0314
Updated
2026-11-03
GitHub AdvisoriesGHSA-3j5j-x7ph-c2r8 No score

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8...

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Record
GHSA-3j5j-x7ph-c2r8
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
icedove
Debian:4.0
before 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1, plus listed versions
1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny11.5.0.13+1.5.0.14b.dfsg1-0etch11.5.0.13+1.5.0.14b.dfsg1-0lenny1
Show 4 moreShow less
1.5.0.13+1.5.0.15a.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch11.5.0.13+1.5.0.15b.dfsg1-0etch2
1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1
iceape
Debian:4.0
before 1.0.13~pre080614i-0etch1, plus listed versions
1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.11~pre071022-0etch1
Show 8 moreShow less
1.0.11~pre071022-0etch1+lenny11.0.12~pre080131b-0etch11.0.12~pre080131b-0etch21.0.13~pre080323b-0etch11.0.13~pre080323b-0etch21.0.13~pre080323b-0etch31.0.8-41.0.9-0etch1
1.0.13~pre080614i-0etch1
seamonkey
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-chat
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-devel
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-dom-inspector
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-js-debugger
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-mail
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr-devel
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
Show 116 moreShow less
Affected packages
PackageAffectedFixed
seamonkey-nss
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss-devel
Red Hat:enterprise_linux:2.1::as
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-chat
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-devel
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-dom-inspector
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-js-debugger
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-mail
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr-devel
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss-devel
Red Hat:enterprise_linux:2.1::aw
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-chat
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-devel
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-dom-inspector
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-js-debugger
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-mail
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr-devel
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss-devel
Red Hat:enterprise_linux:2.1::es
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-chat
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-devel
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-dom-inspector
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-js-debugger
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-mail
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nspr-devel
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey-nss-devel
Red Hat:enterprise_linux:2.1::ws
before 0:1.0.9-0.9.el2
0:1.0.9-0.9.el2
seamonkey
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-chat
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-mail
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-chat
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-mail
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-chat
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-mail
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-chat
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-mail
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.9.el3
0:1.0.9-0.9.el3
seamonkey
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-chat
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-devel
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-mail
Red Hat:enterprise_linux:4::as
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-chat
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-devel
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-mail
Red Hat:enterprise_linux:4::es
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-chat
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-devel
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
seamonkey-mail
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-9.el4
0:1.0.9-9.el4
thunderbird
Red Hat:enterprise_linux:4::as
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird
Red Hat:enterprise_linux:4::desktop
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird
Red Hat:enterprise_linux:4::es
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird
Red Hat:enterprise_linux:4::ws
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.5.0.12-8.el4
0:1.5.0.12-8.el4
thunderbird
Red Hat:enterprise_linux:5::client
before 0:1.5.0.12-8.el5
0:1.5.0.12-8.el5
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.5.0.12-8.el5
0:1.5.0.12-8.el5
thunderbird
Red Hat:rhel_productivity:5
before 0:1.5.0.12-8.el5
0:1.5.0.12-8.el5
thunderbird-debuginfo
Red Hat:rhel_productivity:5
before 0:1.5.0.12-8.el5
0:1.5.0.12-8.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0304 is a high vulnerability (CVSS 7.5) in Mozilla Seamonkey, published February 29, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.05%, the 93rd percentile. Fixed in icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1.

References

Show 73 moreShow less
MoveEnter Open