PT-2023-1561 · Mozilla+8 · Thunderbird+8
Kai Engert
·
Publicado
2023-02-14
·
Atualizado
2025-01-10
·
CVE-2023-0616
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 102.8
Description
The issue is related to the processing of OpenPGP and OpenPGP MIME data in a specific way, which could cause Thunderbird's user interface to lock up and no longer respond to user actions. An attacker could send a crafted message to attempt a DoS attack by exploiting this error.
Recommendations
For versions prior to 102.8, update to version 102.8 or later to resolve the issue. As a temporary workaround, consider avoiding the use of OpenPGP and OpenPGP MIME data in emails until the update is applied.
Correção
DoS
Allocation of Resources Without Limits
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Rocky Linux
Thunderbird
Ubuntu