PT-2022-25412 · Mozilla+5 · Thunderbird+5

Published 2022-08-02 · Updated 2026-04-17 · CVE-2022-4055

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions xdg-mail (affected versions not specified)

Description The issue arises when xdg-mail is configured to use thunderbird for mailto URLs, leading to improper parsing of the URL. This can result in additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can exploit this by creating a mailto URL that appears safe but will actually attach files when clicked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-146

Related Identifiers

ALSA-2025:7672

ALT-PU-2024-10322

ALT-PU-2024-12523

AZL-11465

AZL-37063

BDU:2025-04910

CVE-2022-4055

ECHO-581A-B1A0-1CC4

INFSA-2025_7672

RHSA-2025:7672

RHSA-2025_7672

Affected Products

Alt Linux

Almalinux

Debian

Red Hat

Rocky Linux

Thunderbird

References · 24

• 🔥 https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267 · Exploit
• https://linux.oracle.com/errata/ELSA-2025-7672.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-37063 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4055 · Security Note
• https://ubuntu.com/security/CVE-2022-4055 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4055 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04910 · Security Note
• https://osv.dev/vulnerability/ALSA-2025:7672 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4055 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4055 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4055 · Security Note
• https://errata.almalinux.org/9/ALSA-2025-7672.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-11465 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2022-4055 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2022-4055 · Vendor Advisory