QwikSec

Security Database

CVE

CWE

Training

CVE-2023-3417

Published: Jul 24, 2023

Modified: Dec 18, 2025

PUBLISHED

Description

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This vulnerability affects Thunderbird < 115.0.1 and Thunderbird < 102.13.1.

Vendor	Product	Versions
Mozilla	Thunderbird	affected `unspecified - < 115.0.1`
Mozilla	Thunderbird	affected `unspecified - < 102.13.1`

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1835582

https://lists.debian.org/debian-lts-announce/2023/07/msg00032.html

https://www.debian.org/security/2023/dsa-5463

https://www.mozilla.org/security/advisories/mfsa2023-27/

https://www.mozilla.org/security/advisories/mfsa2023-28/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.