CVE-2017-7848: Medium severity Mozilla Thunderbird vulnerability
Last updated 24 July 2024
Other sources
RSS fields can inject new lines into the created email structure, modifying the message body.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:115.16.0esr-1~deb11u1Fixed in 1:115.12.0-1~deb12u1Fixed in 1:115.16.0esr-1~deb12u1Fixed in 1:128.2.0esr-1Fixed in 1:128.3.0esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 52.5.2
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2017-7848?
CVE-2017-7848 is a vulnerability that allows RSS fields to inject new lines into the created email structure, modifying the message body.
Which software versions are affected by CVE-2017-7848?
CVE-2017-7848 affects Thunderbird versions before 52.6.0.
What is the severity of CVE-2017-7848?
CVE-2017-7848 has a severity rating of medium with a CVSS score of 5.3.
How can I fix CVE-2017-7848?
To fix CVE-2017-7848, it is recommended to update Thunderbird to version 52.6.0 or newer.
Where can I find more information about CVE-2017-7848?
You can find more information about CVE-2017-7848 on the Mozilla Bugzilla and Mozilla Security Advisories websites.