CVE-2023-37208
Assigner: mozilla
Published: 2023-07-05T08:54:19.005Z
State: PUBLISHED
affected: product: Firefox
vendor: Mozilla
versions: lessThan: 115
status: affected
version: unspecified
versionType: custom
product: Firefox ESR
vendor: Mozilla
versions: lessThan: 102.13
status: affected
version: unspecified
versionType: custom
product: Thunderbird
vendor: Mozilla
versions: lessThan: 102.13
status: affected
version: unspecified
versionType: custom
descriptions: value: When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
supportingMedia: type: text/html
base64: no
value: When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
problemTypes: descriptions: description: Lack of warning when opening Diagcab files
type: text
credits: value: P Umar Farooq