{"id":"CVE-2004-0908","aliases":["EUVD-2004-0906","GHSA-8c73-9gh8-7c8v"],"status":"published","title":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...","description":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02453,"percentile":0.84495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-09-24T04:00:00Z","modified":"2026-06-16T22:06:38Z","products":[{"vendor":"mozilla","product":"mozilla"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"http://www.securityfocus.com/bid/11179","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/460528","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Patch"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109900315219363\u0026w=2","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=257523","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17376","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109698896104418\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/12526","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0908"},{"url":"https://github.com/advisories/GHSA-8c73-9gh8-7c8v"}],"sources":{"cve":[{"id":"CVE-2004-0908","description":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.","status":"published","published":"2004-09-24T04:00:00Z","modified":"2024-08-08T00:31:48.209Z","updated_at":"2026-11-02T14:34:54.758165Z"}],"euvd":[{"id":"EUVD-2004-0906","description":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.","status":"published","published":"2004-09-24T04:00:00Z","modified":"2024-08-08T00:31:48Z","updated_at":"2026-11-03T01:15:17.239417Z"}],"ghsa":[{"id":"GHSA-8c73-9gh8-7c8v","title":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...","description":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.","status":"published","published":"2022-04-29T02:58:35Z","modified":"2023-01-30T05:02:53Z","updated_at":"2026-11-02T14:46:44.129156Z"}],"nvd":[{"id":"CVE-2004-0908","description":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:06:38.767Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}