DEBIAN-CVE-2025-0510

DEBIAN-CVE-2025-0510 PUBLISHED CVSS 6.5 MEDIUM

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:13	thunderbird	0, 0
Debian:11	thunderbird	115.1.0-1, 102.0, 102.1.0-1
Debian:14	thunderbird	0, 0
Debian:12	thunderbird	1:102.13.0-1~deb11u1, 1:102.13.1-1~deb10u1, 1:102.13.1-1~deb11u1

Timeline

Feb 4, 2025 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2025-0510 advisory

Open in Interactive Console →