Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026
CVE-2004-0908
CVE-2004-0908
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
56cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*+ 44 more
- cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*
- (no CPE)range: < 1.7.3
cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
- (no CPE)range: < 0.8
- Range: < Preview Release
Patches
Vulnerability mechanics
References
11- www.novell.com/linux/security/advisories/2004_36_mozilla.htmlnvdPatch
- bugzilla.mozilla.org/show_bug.cginvdExploitPatch
- www.securityfocus.com/bid/11179nvdExploitPatch
- www.kb.cert.org/vuls/id/460528nvdUS Government Resource
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/12526nvd
- security.gentoo.org/glsa/glsa-200409-26.xmlnvd
- www.mozilla.org/projects/security/known-vulnerabilities.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/17376nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745nvd
News mentions
0No linked articles in our index yet.