ISOMAN

CVE

CVE-2017-7829

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.

Severity
MEDIUM
CVSS
5.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/102258
  2. http://www.securitytracker.com/id/1040123
  3. https://access.redhat.com/errata/RHSA-2018:0061
  4. https://bugzilla.mozilla.org/show_bug.cgi?id=1423432
  5. https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html
  6. https://usn.ubuntu.com/3529-1/
  7. https://www.debian.org/security/2017/dsa-4075
  8. https://www.mozilla.org/security/advisories/mfsa2017-30/
  9. http://www.securityfocus.com/bid/102258
  10. http://www.securitytracker.com/id/1040123
  11. https://access.redhat.com/errata/RHSA-2018:0061
  12. https://bugzilla.mozilla.org/show_bug.cgi?id=1423432
  13. https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html
  14. https://usn.ubuntu.com/3529-1/
  15. https://www.debian.org/security/2017/dsa-4075
  16. https://www.mozilla.org/security/advisories/mfsa2017-30/