CVE-2008-6961

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive…

published August 13, 2009

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01518 · 74.2th percentile
Published
2009-08-13T16:00Z
EPSS history
Timeline
  • 13 AUG 16:00Z
    mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive…
    cvelistv5