Логотип exploitDog
bind:"CVE-2023-29542"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-29542"

Количество 12

Количество 12

ubuntu логотип

CVE-2023-29542

около 2 лет назад

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2023-29542

около 2 лет назад

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2023-29542

около 2 лет назад

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-29542

около 2 лет назад

A newline in a filename could have been used to bypass the file extens ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-pc79-pjx7-pq9h

около 2 лет назад

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2023-02690

около 2 лет назад

Уязвимость браузеров Mozilla Firefox, Focus for Android, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с некорректной обработкой новой строки в имени файла, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольный код

CVSS3: 6.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1855-1

около 2 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1819-1

около 2 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1817-1

около 2 лет назад

Security update for MozillaFirefox

EPSS: Низкий
redos логотип

ROS-20230505-02

около 2 лет назад

Множественные уязвимости firefox

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20230505-01

около 2 лет назад

Множественные уязвимости thunderbird

CVSS3: 6.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:2064-1

около 2 лет назад

Security update for MozillaThunderbird

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-29542

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
0%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-29542

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 6.1
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-29542

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-29542

A newline in a filename could have been used to bypass the file extens ...

CVSS3: 9.8
0%
Низкий
около 2 лет назад
github логотип
GHSA-pc79-pjx7-pq9h

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

CVSS3: 9.8
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2023-02690

Уязвимость браузеров Mozilla Firefox, Focus for Android, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с некорректной обработкой новой строки в имени файла, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольный код

CVSS3: 6.3
0%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:1855-1

Security update for MozillaFirefox

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:1819-1

Security update for MozillaFirefox

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:1817-1

Security update for MozillaFirefox

около 2 лет назад
redos логотип
ROS-20230505-02

Множественные уязвимости firefox

CVSS3: 8.8
около 2 лет назад
redos логотип
ROS-20230505-01

Множественные уязвимости thunderbird

CVSS3: 6.3
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:2064-1

Security update for MozillaThunderbird

около 2 лет назад

Уязвимостей на страницу