CVE-2023-29542

CVE-2023-29542

Critical · published June 19, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

🚨 A sneaky newline character in a filename could trick Firefox and Thunderbird into executing malicious code! 🔥 Think of it like a restaurant menu that has a hidden extra item at the bottom — you order the safe dish, but that sneaky newline lets the waiter serve you something entirely different and dangerous! This vulnerability could allow an attacker to bypass file extension protections, leading to full execution of malicious code when unsuspecting users open what they think is a safe file. The consequences could be absolutely devastating, potentially compromising sensitive information or resulting in system takeovers.

Put simply

Think of it like a restaurant menu that has a hidden extra item at the bottom — you order the safe dish, but that sneaky newline lets the waiter serve you something entirely different and dangerous! CVE-2023-29542 exploits a flaw in Firefox and Thunderbird on Windows where a newline in a filename bypasses security measures that rename malicious file extensions, like .lnk to .download, thus allowing harmful code to execute.

What to do

This vulnerability could allow an attacker to bypass file extension protections, leading to full execution of malicious code when unsuspecting users open what they think is a safe file. The consequences could be absolutely devastating, potentially compromising sensitive information or resulting in system takeovers. To protect yourself, immediately update Firefox to version 112 or later and Thunderbird to version 102.10 or later. If you're an enterprise user, ensure your Firefox ESR is also updated to these versions. Don’t wait! You’ve got this! Stay proactive to keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00940 · 60.6th percentile
Published
2023-06-19T15:15Z
Affected products (3)
ProductVersionsFixed in
mozilla/firefox< 112.0112.0
mozilla/firefox_esr< 102.10102.10
mozilla/thunderbird< 102.10102.10
References (10)
EPSS history
Timeline
  • 19 JUN 10:03Z
    A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with…
    cvelistv5