CVE-2023-3417: File Extension Spoofing using the Text Direction Override Character
Last updated 24 July 2024
Other sources
Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-3417.
What was the impact of CVE-2023-3417?
The impact of CVE-2023-3417 was that Thunderbird allowed the Text Direction Override Unicode Character in filenames, resulting in email attachments being incorrectly shown as document files when they were actually executable files.
Which versions of Thunderbird are affected by CVE-2023-3417?
Thunderbird versions up to 102.13.1 and versions up to 115.0.1 are affected by CVE-2023-3417.
How can I mitigate CVE-2023-3417?
To mitigate CVE-2023-3417, it is recommended to update to newer versions of Thunderbird (102.13.1 or higher) that strip the Text Direction Override Unicode Character from filenames.
Where can I find more information about CVE-2023-3417?
You can find more information about CVE-2023-3417 on the Mozilla security advisories pages: [https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/) and [https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/)