CVE-2008-4070

no score yetEPSS 7.4%

mozilla: no CVSS score yet. EPSS 7.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."

EPSS: 7.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-09-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:seamonkey
mozilla:thunderbird

References

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
http://secunia.com/advisories/32010
http://secunia.com/advisories/32025
http://secunia.com/advisories/32044
http://secunia.com/advisories/32082

Check your stack JSON