QwikSec

Security Database

CVE

CWE

Training

CVE-2023-29542

Published: Jun 19, 2023

Modified: Dec 11, 2024

PUBLISHED

Description

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

Vendor	Product	Versions
Mozilla	Firefox	affected `unspecified - < 112`
Mozilla	Firefox ESR	affected `unspecified - < 102.10`
Mozilla	Thunderbird	affected `unspecified - < 102.10`

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1810793

https://bugzilla.mozilla.org/show_bug.cgi?id=1815062

https://www.mozilla.org/security/advisories/mfsa2023-13/

https://www.mozilla.org/security/advisories/mfsa2023-14/

https://www.mozilla.org/security/advisories/mfsa2023-15/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.