CVE-2023-29542

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 112 Mozilla Firefox ESR versions prior to 102.10 Mozilla Thunderbird versions prior to 102.10

Description The issue is related to the incorrect handling of a newline in a filename, which could allow a remote attacker to bypass file extension security mechanisms. This mechanism replaces malicious file extensions, such as .lnk, with .download. The bypass could lead to the accidental execution of malicious code. This bug only affects Firefox and Thunderbird on Windows, with other versions of these applications being unaffected.

Recommendations For Mozilla Firefox versions prior to 112, update to version 112 or later. For Mozilla Firefox ESR versions prior to 102.10, update to version 102.10 or later. For Mozilla Thunderbird versions prior to 102.10, update to version 102.10 or later.