CVE-2020-12397

Publication date

2020-05-22 18:57:12

Family

mozilla

State

PUBLISHED

Description

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0.