CVE-2023-29542
Summary
| CVE | CVE-2023-29542 |
|---|---|
| State | PUBLISHED |
| Assigner | mozilla |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-19 11:15:09 UTC |
| Updated | 2026-10-23 23:10:00 UTC |
| Description | A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. |
Risk And Classification
Primary CVSS: v3.1 9.8 CRITICAL from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.009400000 probability, percentile 0.605960000 (date 2026-10-23)
Problem Types: NVD-CWE-noinfo | Bypass of file download extension restrictions | CWE-noinfo Not enough information
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | ADP | DECLARED | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | - | All | All | All |
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox Esr | All | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Mozilla | Firefox | affected unspecified 112 custom | Not specified |
| CNA | Mozilla | Firefox ESR | affected unspecified 102.10 custom | Not specified |
| CNA | Mozilla | Thunderbird | affected unspecified 102.10 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Vulnerabilities fixed in Firefox 112, Firefox for Android 112, Focus for Android 112 — Mozilla | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| Access Denied | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | Permissions Required |
| Security Vulnerabilities fixed in Firefox ESR 102.10 — Mozilla | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| Access Denied | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | Permissions Required |
| Security Vulnerabilities fixed in Thunderbird 102.10 — Mozilla | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Shaheen Fazim and Ameen Basha M K (en)
Legacy QID Mappings
- 378383 Mozilla Firefox Multiple Vulnerabilities (MFSA2023-13)
- 378384 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2023-14)
- 378387 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2023-15)
- 503446 Alpine Linux Security Update for firefox-esr
- 506054 Alpine Linux Security Update for firefox-esr
- 753906 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1819-1)
- 753907 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1817-1)
- 753909 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1855-1)