CVE-2017-7829

Description

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.

References

https://www.mozilla.org/security/advisories/mfsa2017-30/

https://www.debian.org/security/2017/dsa-4075

https://usn.ubuntu.com/3529-1/

https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1423432

https://access.redhat.com/errata/RHSA-2018:0061

http://www.securitytracker.com/id/1040123

http://www.securityfocus.com/bid/102258

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3