CVE-2023-50762

Summary

CVE-2023-50762 is a vulnerability affecting Thunderbird versions below 115.6. This issue arises when processing PGP/MIME payloads with digitally signed text. Instead of displaying the first paragraph as intended, Thunderbird interprets it as a MIME message header. As a result, attackers can exploit this vulnerability by crafting a signed text from another context, such as a Git commit, to spoof email messages. The first paragraph of the text, intended for user viewing, is never shown to the user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.