CVE-2004-0908: Mozilla

Medium severity, CVSS 4.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.

Affected products

• Mozilla Mozilla: version 0.8 only; version 0.9.2 only; version 0.9.2.1 only; version 0.9.3 only; version 0.9.4 only; version 0.9.4.1 only; …
• Mozilla Thunderbird: version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; …

Published 2004-12-31. Last modified 2026-06-16.