Published: 24/06/2021 Updated: 08/07/2021

CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9

CVSS v3 Base Score: 6.8 | Impact Score: 5.2 | Exploitability Score: 1.6

VMScore: 356

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure In adddition a number of security issues were addressed in the OpenPGP support For the stable distribution (buster), these problems have been fixed in version 1:78100-1~deb10u1 We recommend that you upgrade y ...

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine This vulnerability affects Firefox < 85 (CVE-2021-23991) (CVE-2021-23992) (CVE-2021-23961) (CVE-2021-23993) (CVE-2021-23994) (CVE-2021-23995) (CVE- ...

Mozilla Foundation Security Advisory 2021-13 Security Vulnerabilities fixed in Thunderbird 7891 Announced April 8, 2021 Impact moderate Products Thunderbird Fixed in Thunderbird 7891 ...

No description is available for this CVE ...

A security issue was found in Thunderbird before version 7891 If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird mi ...

NVD-CWE-Other https://www.mozilla.org/security/advisories/mfsa2021-13/https://bugzilla.mozilla.org/show_bug.cgi?id=1673240 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4897

CVE-2021-23991

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect