Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0616

Опубликовано: 02 июн. 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 102.8 (исключая)

EPSS

Процентиль: 30%
0.00104
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 4.3
redhat
больше 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 6.5
debian
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain wa ...

CVSS3: 6.5
github
около 2 лет назад

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

CVSS3: 4.3
fstec
больше 2 лет назад

Уязвимость почтового клиента Thunderbird, связанная с ошибкой при обработке данных OpenPGP и OpenPGP MIME, позволяющая нарушителю выполнить атаку типа «отказ в обслуживании» (DoS)

EPSS

Процентиль: 30%
0.00104
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770