PT-2017-17950 · Mozilla+5 · Thunderbird+5

Cure53 · Publicado 2017-12-22 · Atualizado 2024-06-15 · CVE-2017-7848

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2

Description The issue allows RSS fields to inject new lines into the created email structure, thereby modifying the message body.

Recommendations For versions prior to 52.5.2, update to version 52.5.2 or later to resolve the issue.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

ALT-PU-2017-2838

CESA-2018_0061

CVE-2017-7848

DLA-1223-1

DSA-4075-1

MGASA-2017-0477

OPENSUSE-SU-2017:3433-1

OPENSUSE-SU-2017:3434-1

OPENSUSE-SU-2017_3434-1

OPENSUSE-SU-2024:10601-1

RHSA-2018:0061

RHSA-2018_0061

USN-3529-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Thunderbird

Ubuntu

Referências · 440

• https://cve.org/CVERecord?id=CVE-2017-7848 · Nota de Segurança
• https://suse.com/security/cve/CVE-2020-12421 · Nota
• https://suse.com/security/cve/CVE-2018-12405 · Nota
• https://suse.com/security/cve/CVE-2021-23968 · Nota
• https://suse.com/security/cve/CVE-2020-6794 · Nota
• https://suse.com/security/cve/CVE-2020-15677 · Nota
• https://suse.com/security/cve/CVE-2019-11739 · Nota
• https://suse.com/security/cve/CVE-2017-7807 · Nota
• https://suse.com/security/cve/CVE-2017-7786 · Nota
• https://suse.com/security/cve/CVE-2019-11729 · Nota
• https://suse.com/security/cve/CVE-2021-29964 · Nota
• https://suse.com/security/cve/CVE-2008-4067 · Nota
• https://suse.com/security/cve/CVE-2019-5785 · Nota
• https://suse.com/security/cve/CVE-2018-5184 · Nota
• https://suse.com/security/cve/CVE-2008-4065 · Nota