CVE-2023-29542

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. This bug only affects Firefox and Thunderbird on Windows. Other versions...

PT-2023-2792

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 112 Mozilla Firefox ESR versions prior to 102.10 Mozilla Thunderbird versions prior to 102.10 Description The issue is related to the incorrect handling of a newline in a filename, which could allow a remote...