CVE-2008-6961 PUBLISHED CVSS 4.300000190734863 MEDIUM

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.

EPSS 0.65% · 70.7th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.65%
70.7th percentile

Affected Products

VendorProductVersions
mozillaseamonkey1.1.10, 1.1.11, 0
mozillathunderbird1.0.5, 1.0.7, 1.0.8
n/an/an/a

Timeline

References

Open in Interactive Console →