CVE-2023-32214: High severity Mozilla Thunderbird vulnerability
Protocol handlers ms-cxh and ms-cxh-full could have been leveraged to trigger a denial of service. Note: This attack only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
Other sources
Protocol handlers ms-cxh and ms-cxh-full could have been leveraged to trigger a denial of service.Note: This attack only affects Windows. Other operating systems are not affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 102.11 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 102.11 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 113 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 102.11.0-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-32214.
How can this vulnerability be exploited?
This vulnerability can be exploited by leveraging the protocol handlers ms-cxh and ms-cxh-full to trigger a denial of service.
Which operating systems are affected by this vulnerability?
This vulnerability only affects Windows. Other operating systems are not affected.
What is the severity level of this vulnerability?
The severity of this vulnerability is low.
How can I fix this vulnerability?
To fix this vulnerability, update Mozilla Thunderbird to version 102.11, Mozilla Firefox to version 113, or Mozilla Firefox ESR to version 102.11.