A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code.
*This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1810793 | Permissions Required |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1815062 | Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-13/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-14/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-15/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1810793 | Permissions Required |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1815062 | Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-13/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-14/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-15/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1810793 - Permissions Required | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1815062 - Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-13/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-14/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-15/ - Vendor Advisory |
27 Jun 2023, 08:51
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1810793 - Permissions Required | |
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1815062 - Permissions Required | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-14/ - Vendor Advisory | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-13/ - Vendor Advisory | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-15/ - Vendor Advisory | |
| First Time |
Mozilla firefox
Mozilla thunderbird Mozilla Microsoft Mozilla firefox Esr Microsoft windows |
19 Jun 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-19 11:15
Updated : 2024-11-21 07:57
NVD link : CVE-2023-29542
Mitre link : CVE-2023-29542
CVE.ORG link : CVE-2023-29542
JSON object : View
Products Affected
mozilla
- firefox
- thunderbird
- firefox_esr
microsoft
- windows
CWE