CVE-2017-7829
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.
Affected (16)
Products: Mozilla: Thunderbird · Redhat: Enterprise Linux Aus, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Workstation · Debian: Debian Linux · +1 more
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 52.5.2 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.4 | |
| Version 6.0 | |
| Version 7.4 | |
| Version 6.0 | |
| Version 6.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.04 |
References (16)
Source: security@mozilla.org
ExploitIssue TrackingPatch
Source: security@mozilla.org
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.