Published: 27/09/2019 Updated: 24/08/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

It exists that encrypted S/MIME parts in a multipart message can leak plaintext contents when included in a HTML reply or forward in some circumstances. If a user were tricked in to replying to or forwarding a specially crafted message, an attacker could potentially exploit this to obtain sensitive information. (CVE-2019-11739)

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird

Several security issues were fixed in Thunderbird ...

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message For the oldstable distribution (stretch), these problems have been fixed in version 1: ...

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward This vulnerability affects Thunderbird < 681 and Thunderbird < 609 (CVE-2019-11739) A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canv ...

Mozilla Foundation Security Advisory 2019-29 Security vulnerabilities fixed in - Thunderbird 609 Announced September 6, 2019 Impact high Products Thunderbird Fixed in Thunderbird 609 ...

Mozilla Foundation Security Advisory 2019-30 Security vulnerabilities fixed in - Thunderbird 681 Announced September 11, 2019 Impact high Products Thunderbird Fixed in Thunderbird 681 ...

CWE-319 https://www.mozilla.org/security/advisories/mfsa2019-29/https://www.mozilla.org/security/advisories/mfsa2019-30/https://bugzilla.mozilla.org/show_bug.cgi?id=1571481 http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html https://usn.ubuntu.com/4150-1/https://usn.ubuntu.com/4150-1/https://nvd.nist.gov

CVE-2019-11739

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect