If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1806507 | Issue Tracking Permissions Required Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1806507 | Issue Tracking Permissions Required Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory |
Configurations
History
10 Jan 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-770 |
21 Nov 2024, 07:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1806507 - Issue Tracking, Permissions Required, Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-07/ - Vendor Advisory |
08 Jun 2023, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* | |
| CWE | CWE-400 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1806507 - Issue Tracking, Permissions Required, Vendor Advisory | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-07/ - Vendor Advisory | |
| First Time |
Mozilla
Mozilla thunderbird |
02 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-02 17:15
Updated : 2025-01-10 19:15
NVD link : CVE-2023-0616
Mitre link : CVE-2023-0616
CVE.ORG link : CVE-2023-0616
JSON object : View
Products Affected
mozilla
- thunderbird