MozillaCVELIST:CVE-2017-7848

HistoryJun 11, 2018 - 9:00 p.m.

CVE-2017-7848

2018-06-1121:00:00

mozilla

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2.

CNA Affected

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102258

www.securitytracker.com/id/1040123

access.redhat.com/errata/RHSA-2018:0061

bugzilla.mozilla.org/show_bug.cgi?id=1411699

lists.debian.org/debian-lts-announce/2017/12/msg00026.html

CVE-2017-7848

CNA Affected

References

Related