PT-2023-7923

CVE-2023-50761

·

تاريخ النشر

2023-12-19

·

تاريخ التحديث

2026-10-22

الوصف من

CVSS 2.0
7.6
عالية
المقاييسAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 115.6
Description The issue is related to the implementation of the S/MIME standard in the Thunderbird email client, specifically with errors in checking the cryptographic signature due to a mismatch in the date and time of its creation. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by giving recipients the impression that a message was sent at a different date or time.
Recommendations For versions prior to 115.6, update to version 115.6 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2024:0001
ALSA-2024:0003
ALT-PU-2023-8368
ALT-PU-2024-3860
ALT-PU-2024-4748
CESA-2024_0003
CESA-2024_0027
CLSA-2026-1785560172
DLA-3698-1
DSA-5582-1
MGASA-2024-0006
OPENSUSE-SU-2024_0044-1
OPENSUSE-SU-2024:13519-1
RHSA-2024:0001
RHSA-2024_0001
RHSA-2024:0002
RHSA-2024:0003
RHSA-2024_0003
RHSA-2024:0004
RHSA-2024:0005
RHSA-2024:0027
RHSA-2024_0027
RHSA-2024:0028
RHSA-2024:0029
RHSA-2024:0030
RLSA-2024:0003
SUSE-SU-2024:0044-1
SUSE-SU-2024_0044-1
USN-6563-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾