Log in Start free

Vulnerability · Published Dec 22, 2022 · Assigned by mozilla

CVE-2022-1834

Medium 6.5

In plain English

A medium-severity improper certificate validation in Thunderbird from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 66.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker's email address was not visible. Because Thunderbird compared the invisible sender address with the signature's email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird < 91.10.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20thunderbird91.10.0-r0ALPINE-CVE-2022-1834
Alpine:v3.21thunderbird91.10.0-r0ALPINE-CVE-2022-1834
Alpine:v3.22thunderbird91.10.0-r0ALPINE-CVE-2022-1834
Alpine:v3.23thunderbird91.10.0-r0ALPINE-CVE-2022-1834
Debian:12thunderbird1:91.10.0-1DEBIAN-CVE-2022-1834
Debian:13thunderbird1:91.10.0-1DEBIAN-CVE-2022-1834
Debian:14thunderbird1:91.10.0-1DEBIAN-CVE-2022-1834
Rocky Linux:8thunderbird0:91.10.0-1.el8_6RLSA-2022:4887
Ubuntu:22.04:LTSthunderbird1:91.11.0+build2-0ubuntu0.22.04.1USN-5512-1
Ubuntu:22.04:LTSthunderbird1:91.11.0+build2-0ubuntu0.22.04.1UBUNTU-CVE-2022-1834

Affected products (as reported)

VendorProductVersions
Mozilla Thunderbird unspecified – before 91.10

Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References