CVE-2024-10465: High severity Mozilla Thunderbird vulnerability
A clipboard "paste" button could persist across tabs which allowed a spoofing attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 132.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 128.4.0esr-1~deb11u1Fixed in 128.4.0esr-1~deb12u1Fixed in 128.4.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:128.4.0esr-1~deb11u1Fixed in 1:128.4.0esr-1~deb12u1Fixed in 1:128.4.0esr-1Fixed in 1:128.4.2esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 128.4 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 132 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 132 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 128.4
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-10465?
CVE-2024-10465 is classified as a moderate severity vulnerability, given its potential to allow spoofing attacks.
How do I fix CVE-2024-10465?
To fix CVE-2024-10465, update your Firefox to version 132 or higher, or Thunderbird to version 128.4 or higher.
What products are affected by CVE-2024-10465?
CVE-2024-10465 affects Firefox versions lower than 132, Firefox ESR versions lower than 128.4, and Thunderbird versions lower than 128.4.
What type of attack does CVE-2024-10465 enable?
CVE-2024-10465 enables a spoofing attack through a clipboard 'paste' button persisting across tabs.
Is there a workaround for CVE-2024-10465?
There are no official workarounds for CVE-2024-10465; updating to the latest versions is recommended for protection.