vulnerability

Red Hat: CVE-2025-0510: thunderbird: Address of e-mail sender can be spoofed by malicious email (Multiple Advisories)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:M/Au:N/C:P/I:C/A:N)
Published
Feb 4, 2025
Added
Feb 11, 2025
Modified
Oct 13, 2025

Description

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability affects Thunderbird < 128.7 and Thunderbird < 135.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today