Published: 22/12/2022 Updated: 30/12/2022

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird

Mozilla Foundation Security Advisory 2022-42 Security Vulnerabilities fixed in Thunderbird 1023 Announced September 20, 2022 Impact high Products Thunderbird Fixed in Thunderbird 1023 ...

Description This CVE is under investigation by Red Hat Product Security ...

NVD-CWE-noinfo https://www.mozilla.org/security/advisories/mfsa2022-42/https://bugzilla.mozilla.org/show_bug.cgi?id=1789061 https://nvd.nist.gov https://www.mozilla.org/en-US/security/advisories/mfsa2022-42/https://access.redhat.com/security/cve/cve-2022-3155

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-3155

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect