vulnerability

Oracle Linux: CVE-2017-5383: ELSA-2017-0238: thunderbird security update (IMPORTANT) (Multiple Advisories)

Try Surface Command
Back to search
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Jan 24, 2017
Added
Jan 26, 2017
Modified
Jan 7, 2025

Description

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Solution(s)

oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today