CVE-2023-3417
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-3417 is a vulnerability affecting older versions of Thunderbird email client. The issue allows certain Unicode characters in filenames to override the text direction, resulting in incorrect file type identification. An executable file could be disguised as a harmless document, posing a security risk. Newer versions of Thunderbird, specifically 115.0.1 and later, have been updated to strip these characters and display the correct file extension, thus mitigating the issue. Users running versions below these are advised to upgrade as soon as possible to protect against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mozilla Thunderbird
- Debian
Affected Vendors
- Mozilla
- Debian