CVE-2008-0304

Publication date 29 February 2008

Last updated 24 July 2024

Ubuntu priority

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
icedove	7.10 gutsy	Not in release
	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release
mozilla-thunderbird	7.10 gutsy	Not in release
	7.04 feisty	Fixed 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.7.04.0
	6.10 edgy	Fixed 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.10.0
	6.06 LTS dapper	Fixed 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.06.0
thunderbird	7.10 gutsy	Fixed 2.0.0.12+nobinonly-0ubuntu0.7.10.0
	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release

References

Related Ubuntu Security Notices (USN)

USN-582-1
Thunderbird vulnerabilities
29 February 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2008-0304