vulnerability

MFSA2020-18 Thunderbird: Security Vulnerabilities fixed in Thunderbird 68.8.0 (CVE-2020-12397)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

May 5, 2020

Added

May 6, 2020

Modified

Mar 27, 2026

Description

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0.

Solution

mozilla-thunderbird-upgrade-68_8

References

CVE-2020-12397
https://attackerkb.com/topics/CVE-2020-12397
CWE-346
EUVD-EUVD-2020-4709
http://www.mozilla.org/security/announce/2020/mfsa2020-18.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-4709

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report