Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w7wv-wm72-g6pr

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

EPSS

Процентиль: 29%
0.00104
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 4.3
redhat
больше 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 6.5
nvd
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 6.5
debian
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain wa ...

CVSS3: 4.3
fstec
больше 2 лет назад

Уязвимость почтового клиента Thunderbird, связанная с ошибкой при обработке данных OpenPGP и OpenPGP MIME, позволяющая нарушителю выполнить атаку типа «отказ в обслуживании» (DoS)

EPSS

Процентиль: 29%
0.00104
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770