MFSA2024-28 Thunderbird: Security Vulnerabilities fixed in Thunderbird 115.12 (CVE-2024-5692)

MFSA2024-28 Thunderbird: Security Vulnerabilities fixed in Thunderbird 115.12 (CVE-2024-5692)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

06/11/2024

Created

06/14/2024

Added

06/14/2024

Modified

06/24/2024

Description

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Solution(s)

• mozilla-thunderbird-upgrade-115_12

References

• https://attackerkb.com/topics/cve-2024-5692
• CVE - 2024-5692
• http://www.mozilla.org/security/announce/2024/mfsa2024-28.html