CVE-2023-3417

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 115.0.1 Thunderbird versions prior to 102.13.1

Description The issue exists due to the incorrect handling of the Unicode character for text direction override in filenames. This could allow a remote attacker to conduct spoofing attacks by making an executable file appear as a document file.

Recommendations For versions prior to 115.0.1, update to version 115.0.1 or later to resolve the issue. For versions prior to 102.13.1, update to version 102.13.1 or later to resolve the issue. As a temporary workaround, consider disabling the handling of the Text Direction Override Unicode Character in filenames until a patch is available.