Описание
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra/focal | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| jammy | released | 1:128.12.0+build1-0ubuntu0.22.04.1 |
| noble | not-affected | 2:1snap1-0ubuntu3 |
| oracular | not-affected | |
| plucky | not-affected | |
| upstream | released | 1:128.8.0esr-1,136 |
Показывать по
Ссылки на источники
EPSS
7 High
CVSS3
Связанные уязвимости
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.
Certain crafted MIME email messages that claimed to contain an encrypt ...
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.
Уязвимость почтового клиента Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
7 High
CVSS3