CVE-2017-7848

—

CVSS 3.0

5.3 medium

EPSS

2%p77

Published

Jun 11, 2018 (Jun 11, 2018)

Modified

Jun 17, 2026

Description

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2.

Vendors: mozilla redhat debian
Products: thunderbird, enterprise linux, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux workstation, debian linux
Weakness: CWE-74
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news1 stories

Mozilla patches five issues in Thunderbird, including a critical flaw

Security AffairsDec 27, 10:34 UTC · Dec 27, 2017Vulnerability CVE-2017-7845 CVE-2017-7846 CVE-2017-7847+2 CVEs

60