CVE-2023-29542
Summary
| CVE | CVE-2023-29542 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-19 11:15:00 UTC |
| Updated | 2023-06-27 08:51:00 UTC |
| Description | A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | - | All | All | All |
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox Esr | All | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Vulnerabilities fixed in Firefox 112, Firefox for Android 112, Focus for Android 112 — Mozilla | MISC | www.mozilla.org | |
| Access Denied | MISC | bugzilla.mozilla.org | |
| Access Denied | MISC | bugzilla.mozilla.org | |
| Security Vulnerabilities fixed in Firefox ESR 102.10 — Mozilla | MISC | www.mozilla.org | |
| Security Vulnerabilities fixed in Thunderbird 102.10 — Mozilla | MISC | www.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 378383 Mozilla Firefox Multiple Vulnerabilities (MFSA2023-13)
- 378384 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2023-14)
- 378387 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2023-15)
- 503446 Alpine Linux Security Update for firefox-esr
- 506054 Alpine Linux Security Update for firefox-esr
- 753906 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1819-1)
- 753907 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1817-1)
- 753909 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1855-1)