CVE-2023-3417: File Extension Spoofing using the Text Direction Override Character
Last updated 24 July 2024
Other sources
Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 102.13.1 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 115.0.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 115.0.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 102.13.1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:128.9.0esr-1~deb11u1Fixed in 1:128.8.0esr-1~deb12u1Fixed in 1:128.9.0esr-1~deb12u1Fixed in 1:128.9.0esr-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-3417.
What was the impact of CVE-2023-3417?
The impact of CVE-2023-3417 was that Thunderbird allowed the Text Direction Override Unicode Character in filenames, resulting in email attachments being incorrectly shown as document files when they were actually executable files.
Which versions of Thunderbird are affected by CVE-2023-3417?
Thunderbird versions up to 102.13.1 and versions up to 115.0.1 are affected by CVE-2023-3417.
How can I mitigate CVE-2023-3417?
To mitigate CVE-2023-3417, it is recommended to update to newer versions of Thunderbird (102.13.1 or higher) that strip the Text Direction Override Unicode Character from filenames.
Where can I find more information about CVE-2023-3417?
You can find more information about CVE-2023-3417 on the Mozilla security advisories pages: [https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/) and [https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/](https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/)