CVE-2008-4070

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."

Date published : 2008-09-26

http://www.securityfocus.com/bid/31411

http://www.mozilla.org/security/announce/2008/mfsa2008-46.html