CVE-2022-1834

Publication date 1 June 2022

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker's email address was not visible. Because Thunderbird compared the invisible sender address with the signature's email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird < 91.10.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
thunderbird	23.04 lunar	Fixed 1:91.10.0+build1-0ubuntu1
	22.10 kinetic	Fixed 1:91.10.0+build1-0ubuntu1
	22.04 LTS jammy	Fixed 1:91.11.0+build2-0ubuntu0.22.04.1
	21.10 impish	Fixed 1:91.11.0+build2-0ubuntu0.21.10.1
	20.04 LTS focal	Fixed 1:91.11.0+build2-0ubuntu0.20.04.1
	18.04 LTS bionic	Fixed 1:91.11.0+build2-0ubuntu0.18.04.1

Severity score breakdown

Parameter	Value
Base score	6.5 · Medium
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

Related Ubuntu Security Notices (USN)