The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Windows operating systems is related to insufficient protection of sensitive data. This vulnerability allows attackers to compromise the confidentiality and integrity of protected information.

🗓️ 03 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

Firefox and Thunderbird on Windows risk sensitive data during Save As dialog processing, compromising confidentiality and integrity.

Reporter	Title	Published	Views	Family All 86
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.9ESR) have affected APM Synthetic Playback Agent	22 May 202310:20	–	ibm
ATTACKERKB	CVE-2023-28163	2 Jun 202317:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1988)	22 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 38 : firefox (2023-ed41d3a922)	22 Mar 202300:00	–	nessus
Tenable Nessus	GLSA-202305-35 : Mozilla Firefox: Multiple Vulnerabilities	30 May 202300:00	–	nessus
Tenable Nessus	GLSA-202305-36 : Mozilla Thunderbird: Multiple Vulnerabilities	30 May 202300:00	–	nessus

Vulners

Node

OR

mozilla firefoxRange<111

mozilla firefox_esrRange<102.9

mozilla thunderbirdRange<102.9

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023031479
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-09/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-10/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-11/
access	www.access.redhat.com/security/cve/cve-2023-28163
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail
mozilla	www.mozilla.org/security/advisories/mfsa2023-09.html
mozilla	www.mozilla.org/security/advisories/mfsa2023-10.html

03 Jun 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 36.1

CVSS 26.4

EPSS0.00798

Mozilla Firefox Thunderbird Windows Save As dialog Sensitive data protection Data confidentiality Data integrity