CVE-2008-0304: Mozilla Seamonkey

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

Affected products

• Mozilla Seamonkey: up to and including 1.1.7
• Mozilla Thunderbird: up to and including 2.0.0.9

Published 2008-02-29. Last modified 2026-06-16.