CVE-2025-3875 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From head…
High CVSS: 7.5

CVE-2025-3875

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name ", Thunderbird treats spoofed@example.com as the actual address. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.
Vendor
Mozilla
Product
Thunderbird
CWE
CWE-290
Yayın Tarihi
2025-05-14 17:15:48
Güncelleme
2025-11-03 20:18:48
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-290 Thunderbird HIGH Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1950629 https://www.mozilla.org/security/advisories/mfsa2025-34/ https://www.mozilla.org/security/advisories/mfsa2025-35/ https://lists.debian.org/debian-lts-announce/2025/05/msg00022.html