PT-2023-7923

CVE-2023-50761

·

Published

2023-12-19

·

Updated

2026-10-22

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 115.6
Description The issue is related to the implementation of the S/MIME standard in the Thunderbird email client, specifically with errors in checking the cryptographic signature due to a mismatch in the date and time of its creation. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by giving recipients the impression that a message was sent at a different date or time.
Recommendations For versions prior to 115.6, update to version 115.6 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2024:0001
ALSA-2024:0003
ALT-PU-2023-8368
ALT-PU-2024-3860
ALT-PU-2024-4748
CESA-2024_0003
CESA-2024_0027
CLSA-2026-1785560172
DLA-3698-1
DSA-5582-1
MGASA-2024-0006
OPENSUSE-SU-2024_0044-1
OPENSUSE-SU-2024:13519-1
RHSA-2024:0001
RHSA-2024_0001
RHSA-2024:0002
RHSA-2024:0003
RHSA-2024_0003
RHSA-2024:0004
RHSA-2024:0005
RHSA-2024:0027
RHSA-2024_0027
RHSA-2024:0028
RHSA-2024:0029
RHSA-2024:0030
RLSA-2024:0003
SUSE-SU-2024:0044-1
SUSE-SU-2024_0044-1
USN-6563-1
Found an issue in the description? Have something to add? Feel free to write us 👾