CVE-2023-0616

What it actually does

The vulnerability causes Thunderbird to enter an infinite processing loop when handling a MIME email that combines OpenPGP and OpenPGP MIME data structures in a specific way, rendering the user interface unresponsive.

Why it matters to the business

Email access becomes unavailable until the application is forcibly restarted, interrupting user workflows and communications for affected recipients.

How an attack unfolds

An attacker creates an email with a specific combination of OpenPGP and OpenPGP MIME data and delivers it to the target. Thunderbird attempts to repeatedly process and render the message upon receipt, resulting in a denial of service condition that locks the interface.

How to fix it

Upgrade Mozilla Thunderbird to version 102.8 or newer to correct the message processing logic.

How to confirm the fix worked

Confirm installed Thunderbird version meets or exceeds 102.8 and verify that crafted test messages with the problematic MIME structure no longer cause repeated processing or UI unresponsiveness.

Typical attack path

1. Craft an email containing combined OpenPGP and OpenPGP MIME data structures
2. Send the message to the target recipient
3. Victim opens or previews the message in Thunderbird
4. Application enters repeated processing loop causing UI lockup

How to detect it

Examine Thunderbird process logs and system resource monitors for repeated message parsing activity or high CPU usage triggered by incoming email; inspect message headers for anomalous OpenPGP MIME combinations.

What your security team should do

• Prioritize updating all Thunderbird instances to 102.8 or later
• Review email gateway rules to detect and quarantine suspicious MIME structures
• Monitor support tickets for reports of unresponsive Thunderbird clients