Critical severity9.8NVD Advisory· Published Jun 19, 2023· Updated Jun 17, 2026
CVE-2023-29542
CVE-2023-29542
Description
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code.
*This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
38<112+ 4 more
- (no CPE)range: <112
- (no CPE)range: unspecified
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <112.0
- cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*range: <102.10
- (no CPE)range: unspecified
<102.10+ 2 more
- (no CPE)range: <102.10
- (no CPE)range: unspecified
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <102.10
- osv-coords30 versionspkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS
< 112.0.1-1.1+ 29 more
- (no CPE)range: < 112.0.1-1.1
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 102.10.0-1.1
- (no CPE)range: < 102.10.0-150000.150.82.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.1-150200.8.113.2
- (no CPE)range: < 102.10.1-150200.8.113.2
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150200.152.84.1
- (no CPE)range: < 102.10.0-150000.150.82.1
- (no CPE)range: < 102.10.0-112.156.1
- (no CPE)range: < 102.10.0-150000.150.82.1
- (no CPE)range: < 102.10.1-150200.8.113.2
- (no CPE)range: < 102.10.0-112.156.1
Patches
Vulnerability mechanics
References
5- www.mozilla.org/security/advisories/mfsa2023-13/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2023-14/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2023-15/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdPermissions Required
- bugzilla.mozilla.org/show_bug.cginvdPermissions Required
News mentions
0No linked articles in our index yet.