Address Parsing Vulnerability in Thunderbird Email Client by Mozilla

CVE-2025-3875

What is CVE-2025-3875?

In Mozilla Thunderbird, a vulnerability exists in the way addresses are parsed, allowing for potential sender spoofing. When a server permits the use of an invalid 'From' address, Thunderbird may erroneously interpret the spoofed address as legitimate. For instance, if the 'From' header is improperly formatted, like including trailing spaces or unusual characters, it can lead to confusion and misuse, compromising the integrity of email communication. This issue affects users of versions prior to 128.10.1 and 138.0.1.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References