Vulnerability Details CVE-2017-7829
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.9%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2017-7829
-
cpe:2.3:a:mozilla:thunderbird:-
-
cpe:2.3:a:mozilla:thunderbird:0.1
-
cpe:2.3:a:mozilla:thunderbird:0.2
-
cpe:2.3:a:mozilla:thunderbird:0.3
-
cpe:2.3:a:mozilla:thunderbird:0.4
-
cpe:2.3:a:mozilla:thunderbird:0.5
-
cpe:2.3:a:mozilla:thunderbird:0.6
-
cpe:2.3:a:mozilla:thunderbird:0.7
-
cpe:2.3:a:mozilla:thunderbird:0.7.1
-
cpe:2.3:a:mozilla:thunderbird:0.7.2
-
cpe:2.3:a:mozilla:thunderbird:0.7.3
-
cpe:2.3:a:mozilla:thunderbird:0.8
-
cpe:2.3:a:mozilla:thunderbird:0.9
-
cpe:2.3:a:mozilla:thunderbird:1.0
-
cpe:2.3:a:mozilla:thunderbird:1.0.2
-
cpe:2.3:a:mozilla:thunderbird:1.0.5
-
cpe:2.3:a:mozilla:thunderbird:1.0.6
-
cpe:2.3:a:mozilla:thunderbird:1.0.7
-
cpe:2.3:a:mozilla:thunderbird:1.0.8
-
cpe:2.3:a:mozilla:thunderbird:1.1
-
cpe:2.3:a:mozilla:thunderbird:1.5
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.10
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.12
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.13
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.14
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.2
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.4
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.5
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.7
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.8
-
cpe:2.3:a:mozilla:thunderbird:1.5.0.9
-
cpe:2.3:a:mozilla:thunderbird:10.0
-
cpe:2.3:a:mozilla:thunderbird:10.0.1
-
cpe:2.3:a:mozilla:thunderbird:10.0.2
-
cpe:2.3:a:mozilla:thunderbird:11.0
-
cpe:2.3:a:mozilla:thunderbird:11.0.1
-
cpe:2.3:a:mozilla:thunderbird:12.0
-
cpe:2.3:a:mozilla:thunderbird:12.0.1
-
cpe:2.3:a:mozilla:thunderbird:13.0
-
cpe:2.3:a:mozilla:thunderbird:13.0.1
-
cpe:2.3:a:mozilla:thunderbird:14.0
-
cpe:2.3:a:mozilla:thunderbird:15.0
-
cpe:2.3:a:mozilla:thunderbird:15.0.1
-
cpe:2.3:a:mozilla:thunderbird:16.0
-
cpe:2.3:a:mozilla:thunderbird:16.0.1
-
cpe:2.3:a:mozilla:thunderbird:16.0.2
-
cpe:2.3:a:mozilla:thunderbird:17.0
-
cpe:2.3:a:mozilla:thunderbird:17.0.10
-
cpe:2.3:a:mozilla:thunderbird:17.0.2
-
cpe:2.3:a:mozilla:thunderbird:17.0.3
-
cpe:2.3:a:mozilla:thunderbird:17.0.4
-
cpe:2.3:a:mozilla:thunderbird:17.0.5
-
cpe:2.3:a:mozilla:thunderbird:17.0.6
-
cpe:2.3:a:mozilla:thunderbird:17.0.7
-
cpe:2.3:a:mozilla:thunderbird:17.0.8
-
cpe:2.3:a:mozilla:thunderbird:17.0.9
-
cpe:2.3:a:mozilla:thunderbird:18.0
-
cpe:2.3:a:mozilla:thunderbird:19.0
-
cpe:2.3:a:mozilla:thunderbird:2.0
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.0
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.12
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.14
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.16
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.17
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.18
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.19
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.21
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.22
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.23
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.24
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.4
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.5
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.6
-
cpe:2.3:a:mozilla:thunderbird:2.0.0.9
-
cpe:2.3:a:mozilla:thunderbird:2.0.14
-
cpe:2.3:a:mozilla:thunderbird:20.0
-
cpe:2.3:a:mozilla:thunderbird:21.0
-
cpe:2.3:a:mozilla:thunderbird:22.0
-
cpe:2.3:a:mozilla:thunderbird:23.0
-
cpe:2.3:a:mozilla:thunderbird:24.0
-
cpe:2.3:a:mozilla:thunderbird:24.0.1
-
cpe:2.3:a:mozilla:thunderbird:24.1.0
-
cpe:2.3:a:mozilla:thunderbird:24.1.1
-
cpe:2.3:a:mozilla:thunderbird:24.2.0
-
cpe:2.3:a:mozilla:thunderbird:24.3
-
cpe:2.3:a:mozilla:thunderbird:24.3.0
-
cpe:2.3:a:mozilla:thunderbird:24.4
-
cpe:2.3:a:mozilla:thunderbird:24.4.0
-
cpe:2.3:a:mozilla:thunderbird:24.5.0
-
cpe:2.3:a:mozilla:thunderbird:24.6.0
-
cpe:2.3:a:mozilla:thunderbird:24.7.0
-
cpe:2.3:a:mozilla:thunderbird:24.8.0
-
cpe:2.3:a:mozilla:thunderbird:24.8.1
-
cpe:2.3:a:mozilla:thunderbird:25.0
-
cpe:2.3:a:mozilla:thunderbird:26.0
-
cpe:2.3:a:mozilla:thunderbird:27.0
-
cpe:2.3:a:mozilla:thunderbird:28.0
-
cpe:2.3:a:mozilla:thunderbird:29.0
-
cpe:2.3:a:mozilla:thunderbird:3.0
-
cpe:2.3:a:mozilla:thunderbird:3.0.1
-
cpe:2.3:a:mozilla:thunderbird:3.0.10
-
cpe:2.3:a:mozilla:thunderbird:3.0.11
-
cpe:2.3:a:mozilla:thunderbird:3.0.2
-
cpe:2.3:a:mozilla:thunderbird:3.0.3
-
cpe:2.3:a:mozilla:thunderbird:3.0.4
-
cpe:2.3:a:mozilla:thunderbird:3.0.5
-
cpe:2.3:a:mozilla:thunderbird:3.0.6
-
cpe:2.3:a:mozilla:thunderbird:3.0.7
-
cpe:2.3:a:mozilla:thunderbird:3.0.8
-
cpe:2.3:a:mozilla:thunderbird:3.0.9
-
cpe:2.3:a:mozilla:thunderbird:3.1
-
cpe:2.3:a:mozilla:thunderbird:3.1.1
-
cpe:2.3:a:mozilla:thunderbird:3.1.10
-
cpe:2.3:a:mozilla:thunderbird:3.1.11
-
cpe:2.3:a:mozilla:thunderbird:3.1.12
-
cpe:2.3:a:mozilla:thunderbird:3.1.13
-
cpe:2.3:a:mozilla:thunderbird:3.1.14
-
cpe:2.3:a:mozilla:thunderbird:3.1.15
-
cpe:2.3:a:mozilla:thunderbird:3.1.16
-
cpe:2.3:a:mozilla:thunderbird:3.1.17
-
cpe:2.3:a:mozilla:thunderbird:3.1.18
-
cpe:2.3:a:mozilla:thunderbird:3.1.19
-
cpe:2.3:a:mozilla:thunderbird:3.1.2
-
cpe:2.3:a:mozilla:thunderbird:3.1.20
-
cpe:2.3:a:mozilla:thunderbird:3.1.3
-
cpe:2.3:a:mozilla:thunderbird:3.1.4
-
cpe:2.3:a:mozilla:thunderbird:3.1.5
-
cpe:2.3:a:mozilla:thunderbird:3.1.6
-
cpe:2.3:a:mozilla:thunderbird:3.1.7
-
cpe:2.3:a:mozilla:thunderbird:3.1.8
-
cpe:2.3:a:mozilla:thunderbird:3.1.9
-
cpe:2.3:a:mozilla:thunderbird:3.3
-
cpe:2.3:a:mozilla:thunderbird:30.0
-
cpe:2.3:a:mozilla:thunderbird:31.0
-
cpe:2.3:a:mozilla:thunderbird:31.1.0
-
cpe:2.3:a:mozilla:thunderbird:31.1.1
-
cpe:2.3:a:mozilla:thunderbird:31.1.2
-
cpe:2.3:a:mozilla:thunderbird:31.2.0
-
cpe:2.3:a:mozilla:thunderbird:31.3.0
-
cpe:2.3:a:mozilla:thunderbird:31.4.0
-
cpe:2.3:a:mozilla:thunderbird:31.5.0
-
cpe:2.3:a:mozilla:thunderbird:31.6.0
-
cpe:2.3:a:mozilla:thunderbird:31.7
-
cpe:2.3:a:mozilla:thunderbird:31.7.0
-
cpe:2.3:a:mozilla:thunderbird:31.8.0
-
cpe:2.3:a:mozilla:thunderbird:32.0
-
cpe:2.3:a:mozilla:thunderbird:33.0
-
cpe:2.3:a:mozilla:thunderbird:34.0
-
cpe:2.3:a:mozilla:thunderbird:36.0
-
cpe:2.3:a:mozilla:thunderbird:37.0
-
cpe:2.3:a:mozilla:thunderbird:38.0
-
cpe:2.3:a:mozilla:thunderbird:38.0.1
-
cpe:2.3:a:mozilla:thunderbird:38.1.0
-
cpe:2.3:a:mozilla:thunderbird:38.2.0
-
cpe:2.3:a:mozilla:thunderbird:38.3.0
-
cpe:2.3:a:mozilla:thunderbird:38.4.0
-
cpe:2.3:a:mozilla:thunderbird:38.5.0
-
cpe:2.3:a:mozilla:thunderbird:38.5.1
-
cpe:2.3:a:mozilla:thunderbird:38.6.0
-
cpe:2.3:a:mozilla:thunderbird:38.7.0
-
cpe:2.3:a:mozilla:thunderbird:38.7.1
-
cpe:2.3:a:mozilla:thunderbird:38.7.2
-
cpe:2.3:a:mozilla:thunderbird:38.8.0
-
cpe:2.3:a:mozilla:thunderbird:40.0
-
cpe:2.3:a:mozilla:thunderbird:41.0
-
cpe:2.3:a:mozilla:thunderbird:42.0
-
cpe:2.3:a:mozilla:thunderbird:43.0
-
cpe:2.3:a:mozilla:thunderbird:44.0
-
cpe:2.3:a:mozilla:thunderbird:45.0
-
cpe:2.3:a:mozilla:thunderbird:45.1
-
cpe:2.3:a:mozilla:thunderbird:45.1.0
-
cpe:2.3:a:mozilla:thunderbird:45.1.1
-
cpe:2.3:a:mozilla:thunderbird:45.2
-
cpe:2.3:a:mozilla:thunderbird:45.2.0
-
cpe:2.3:a:mozilla:thunderbird:45.3.0
-
cpe:2.3:a:mozilla:thunderbird:45.4.0
-
cpe:2.3:a:mozilla:thunderbird:45.5.0
-
cpe:2.3:a:mozilla:thunderbird:45.5.1
-
cpe:2.3:a:mozilla:thunderbird:45.6.0
-
cpe:2.3:a:mozilla:thunderbird:45.7.0
-
cpe:2.3:a:mozilla:thunderbird:45.7.1
-
cpe:2.3:a:mozilla:thunderbird:45.8.0
-
cpe:2.3:a:mozilla:thunderbird:47.0
-
cpe:2.3:a:mozilla:thunderbird:49.0
-
cpe:2.3:a:mozilla:thunderbird:5.0
-
cpe:2.3:a:mozilla:thunderbird:50.0
-
cpe:2.3:a:mozilla:thunderbird:51.0
-
cpe:2.3:a:mozilla:thunderbird:52.0
-
cpe:2.3:a:mozilla:thunderbird:52.0.1
-
cpe:2.3:a:mozilla:thunderbird:52.1.0
-
cpe:2.3:a:mozilla:thunderbird:52.1.1
-
cpe:2.3:a:mozilla:thunderbird:52.2.0
-
cpe:2.3:a:mozilla:thunderbird:52.2.1
-
cpe:2.3:a:mozilla:thunderbird:52.3.0
-
cpe:2.3:a:mozilla:thunderbird:52.4.0
-
cpe:2.3:a:mozilla:thunderbird:52.5.0
-
cpe:2.3:a:mozilla:thunderbird:6.0
-
cpe:2.3:a:mozilla:thunderbird:6.0.1
-
cpe:2.3:a:mozilla:thunderbird:6.0.2
-
cpe:2.3:a:mozilla:thunderbird:7.0
-
cpe:2.3:a:mozilla:thunderbird:7.0.1
-
cpe:2.3:a:mozilla:thunderbird:8.0
-
cpe:2.3:a:mozilla:thunderbird:9.0
-
cpe:2.3:a:mozilla:thunderbird:9.0.1
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:17.10
-
cpe:2.3:o:debian:debian_linux:7.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:redhat:enterprise_linux_aus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_eus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_eus:7.5
-
cpe:2.3:o:redhat:enterprise_linux_server:6.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0