Oracle Linux: CVE-2023-37208: ELSA-2023-4062: thunderbird security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2023-37208: ELSA-2023-4062:thunderbird security update (IMPORTANT) (Multiple Advisories)

Severity

7

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

07/04/2023

Created

07/19/2023

Added

07/18/2023

Modified

01/07/2025

Description

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. The Mozilla Foundation Security Advisory describes this flaw as: When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code.

Solution(s)

• oracle-linux-upgrade-firefox
• oracle-linux-upgrade-firefox-x11
• oracle-linux-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2023-37208
• CVE - 2023-37208
• ELSA-2023-4062
• ELSA-2023-4071
• ELSA-2023-4063
• ELSA-2023-4064
• ELSA-2023-4076
• ELSA-2023-4079

View more