{
  "cveId": "CVE-2023-29542",
  "url": "https://patchblox.com/security/cve/CVE-2023-29542",
  "summary": "CVE-2023-29542 is fixed in 3 products on 1 platform, first by Mozilla Firefox (en-US) 112.0, released April 12, 2023. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "Mozilla Firefox and 4 others: A newline in a filename could have been used to bypass the file extension security mechanisms that replace\u2026",
  "description": "A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk  with .download. This could have led to accidental execution of malicious code.\n\n*This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox\u00A0and Thunderbird are unaffected.* This vulnerability affects Firefox \u003C 112, Firefox ESR \u003C 102.10, and Thunderbird \u003C 102.10.",
  "published": "2023-06-19T11:15:09Z",
  "severity": "",
  "cvss": 9.8,
  "epss": 0.0094,
  "epssPercentile": 0.61181,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-29542",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "112.0",
      "fix": "Mozilla Firefox (en-US) 112.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-112.0",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "115.4.0",
      "fix": "Mozilla Firefox ESR (en-US) 115.4.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0",
      "released": "2023-10-17T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Thunderbird (en-US)",
      "fixedVersion": "115.8.0",
      "fix": "Mozilla Thunderbird (en-US) 115.8.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.thunderbird-115.8.0",
      "released": "2024-02-21T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}