Severity
Medium
Analysis Summary
CVE-2023-3417
Mozilla Thunderbird could allow a remote attacker to conduct spoofing attacks. By sending a specially crafted message, an attacker could exploit this vulnerability using the Text Direction Override Unicode Character in filenames to spoof the file extension of an email attachment.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-3417
Affected Vendors
Mozilla
Affected Products
- Mozilla Thunderbird 115.0
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.