CVE-2023-3417

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jul 24, 2023
Updated: Aug 1, 2023

Summary

CVE-2023-3417 is a vulnerability affecting older versions of Thunderbird email client. The issue allows certain Unicode characters in filenames to override the text direction, resulting in incorrect file type identification. An executable file could be disguised as a harmless document, posing a security risk. Newer versions of Thunderbird, specifically 115.0.1 and later, have been updated to strip these characters and display the correct file extension, thus mitigating the issue. Users running versions below these are advised to upgrade as soon as possible to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mozilla Thunderbird
  • Debian

Affected Vendors

  • Mozilla
  • Debian

Advisories, Assessments, and Mitigations

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-3417 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions

Book your demo

Sign in

Back to Vulnerability Database